ordercli
Pass
Audited by Gen Agent Trust Hub on Sep 2, 2026
Risk Level: SAFECREDENTIALS_UNSAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [CREDENTIALS_UNSAFE]: The skill provides instructions for managing sensitive authentication data, including using
--password-stdinfor login and referencing environment variables likeDELIVEROO_BEARER_TOKENandDELIVEROO_COOKIEfor authentication.\n- [EXTERNAL_DOWNLOADS]: The skill metadata contains installation instructions for downloading theorderclitool from external sources including Homebrew (steipete/tap/ordercli) and GitHub (github.com/steipete/ordercli).\n- [COMMAND_EXECUTION]: The skill relies on the execution of theorderclibinary, which allows the agent to interact with external food delivery services.\n- [DATA_EXFILTRATION]: The tool is designed to access and import sensitive browser data, specifically Chrome cookies and browser profiles ($HOME/Library/Application Support/ordercli/browser-profile), to bypass bot protection and manage sessions.
Audit Metadata