ordercli
Fail
Audited by Gen Agent Trust Hub on Jul 16, 2026
Risk Level: HIGHEXTERNAL_DOWNLOADSCREDENTIALS_UNSAFECOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads and installs the
orderclibinary from an external GitHub repository (github.com/steipete/ordercli) via the Go toolchain and a custom Homebrew tap (steipete/tap/ordercli). These sources are not recognized as trusted organizations or well-known services. - [CREDENTIALS_UNSAFE]: The skill provides instructions for the agent to handle sensitive credentials, including passwords via stdin (
--password-stdin) and authentication tokens such asDELIVEROO_BEARER_TOKENandDELIVEROO_COOKIE. - [DATA_EXFILTRATION]: The skill includes commands designed to read sensitive local data, specifically browser cookies from Chrome (
ordercli foodora cookies chrome) and application browser profiles located in$HOME/Library/Application Support/ordercli/browser-profile. - [COMMAND_EXECUTION]: The skill's primary functionality relies on the execution of the externally sourced
orderclibinary, which is granted broad access to local data and network resources for food ordering services.
Recommendations
- AI detected serious security threats
Audit Metadata