360 Secure SkillHub
360 安全技能中心

venue-polling

打包健身房小程序场馆轮询与下单签名工作流:读取或修改 venue_polling.py 轮询 listAreaLease、尝试 createOrder,配合 signature_replay_test.py、public_key_verify_test.py 做签名重放与公钥验签,并附抓包与分析参考文档;直接运行需自备 rsa_private_key.pem,上游签名预镜像格式尚未确认。

ruokkkkk
ruokkkkk
热度 38.40
最近更新 2026-05-18 11:47:24
分类:自动化依赖:代码执行 / 读写文件 / 第三方 API应用场景:自动化脚本 / API 集成 / 调试排错

安装技能

复制下面的话术发给你的 Agent,它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill: npx secure-skills-cli add venue-polling
Metadata
name
venue-polling
description
Use this skill when the user wants to poll gym venue availability, inspect or modify the `venue_polling.py` order-signing flow, or run the bundled signature replay and public-key verification helpers for the mini-program booking APIs.

Venue Polling

Overview

This skill packages the local venue polling and order-signing workflow for the gym mini-program APIs. Use it when the task involves polling listAreaLease, attempting createOrder, or debugging the RSA-based request signature logic used by the booking flow.

Workflow

  1. Start by reading scripts/venue_polling.py to understand the current polling settings, request headers, and signing logic.
  2. If the task is signature debugging rather than live polling, use:
    • scripts/signature_replay_test.py to compare local signatures with a captured request
    • scripts/public_key_verify_test.py to verify candidate sign strings against a captured signature
  3. If the user wants code changes, modify the bundled scripts instead of rewriting the workflow from scratch.
  4. If you need request or reverse-engineering context, read:
    • references/create-order-analysis.md
    • references/captured-create-order.txt
    • references/captured-list-area-lease.txt

Notes

  • scripts/venue_polling.py expects a local rsa_private_key.pem file in the working directory when run directly.
  • The current bundled workflow uses custom X-Ca-* headers and RSA signing, but the exact upstream signing preimage may still differ from the mini-program runtime.
  • Prefer the replay and verification helpers before assuming a signature-format fix.