grocery-list
Pass
Audited by Gen Agent Trust Hub on Sep 30, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a standard CLI utility for managing grocery lists and meal plans. It uses local storage (~/.clawdbot/grocery-list/data.json) and does not involve any network communication or external code execution.- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data through CLI arguments (e.g., recipe names, ingredients, and meal notes) which are stored in a local JSON file and printed back to the terminal. While this creates a theoretical surface for indirect prompt injection, the lack of dangerous capabilities (such as network access or shell execution) prevents this from being a significant security risk.
- Ingestion points: CLI arguments in scripts/grocery.py (e.g., cmd_add, cmd_recipe_add, cmd_meal_add).
- Boundary markers: None present.
- Capability inventory: Local file read/write in scripts/grocery.py to the application data directory.
- Sanitization: None present; data is stored as-is in JSON and printed to stdout.
Audit Metadata