doordash-allergy-shield
Pass
Audited by Gen Agent Trust Hub on Jul 22, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns or security vulnerabilities were detected in the skill instructions or reference files.
- [COMMAND_EXECUTION]: The skill uses the
dd-cli(DoorDash CLI) to manage food orders, which is the primary purpose of the skill. These operations are performed locally and are consistent with the tool's intended use. - [EXTERNAL_DOWNLOADS]: The skill references the
doordash-oss/doordash-cliproject on GitHub. As this is the official open-source organization for DoorDash, a well-known service, it is considered a trusted source. - [PROMPT_INJECTION]: The skill processes external data from DoorDash menu items (via
cart show). While this constitutes an indirect prompt injection surface, the risk is mitigated by the skill's deterministic vetting logic and the requirement for human verification on the final checkout page.
Audit Metadata