food-order-hardened

SUSPICIOUS: the skill is mostly coherent with its stated purpose and includes meaningful approval guardrails, but it installs and trusts a personal third-party CLI at unpinned `@latest` and forwards Foodora credentials/session access to that tool. This is not clearly malicious, yet the supply-chain and real-world action risk are material.