Swiggy_T1

• Analyzed: May 12, 2026, 3:09 AM
• Findings: 1
• Version: 1.0.1
• Hash: 221142f20470ac7dbaf29a0ac065c37082576554dfd17684b13870b178651279
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill is designed to interact with Swiggy's MCP servers for food, groceries, and restaurant bookings. The `SKILL.md` and `README.md` explicitly emphasize critical safety rules, requiring explicit user confirmation before placing any orders or bookings, and detailing a preview workflow. Order logging to `memory/swiggy-orders.json` is a stated, local, and benign action. All network interactions are directed to legitimate Swiggy domains (e.g., `https://mcp.swiggy.com/food`). There is no evidence of malicious intent, data exfiltration, unauthorized execution, or prompt injection attempts to bypass safety measures or perform actions beyond the stated purpose.