mercadona-cli-shopping

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (medium risk: 0.30). The skill instructs installation of third-party software via npm and GitHub curl pipes (https://raw.githubusercontent.com/ivorpad/mercadona-cli/main/install.sh), representing an unverifiable third-party operational dependency.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill provides commands for managing a grocery shopping cart and submitting real supermarket orders/checkouts (mercadona checkout submit), which constitutes direct financial execution for purchasing goods. It includes specific budget guard controls and order submission actions.