pp-fooda

SUSPICIOUS: the core Fooda analytics purpose aligns with reading browser-authenticated Fooda data, and the install path is verifiably same-publisher rather than a random third-party payload. However, the skill requires trusting an external CLI with imported session cookies, supports arbitrary webhook delivery of results, and can perform real-world order placement, making its data-flow and action surface broader than a simple lunch-history helper.