Kroger Grocery

• Risk level: Low
• Analyzed: Feb 25, 2026, 10:00 AM
• Findings: 0
• Version: 1.0.0

Overview

The skill is an instruction-only wrapper for the kroget CLI and Kroger Developer API; its required actions and files are coherent with the stated purpose and do not request unrelated credentials or suspicious installs.

This skill is coherent and appears to do what it says: control the kroget CLI to search products and add items to cart. Before installing, verify the kroget package/source on PyPI/GitHub to ensure you trust it; use pipx if you prefer isolated installs. Keep your Kroger client_secret and tokens private and set ~/.kroget/* permissions to 600 as instructed. Be aware the agent will run local kroget commands (it can add items to your cart), so only enable the skill if you are comfortable granting that capability and have reviewed kroget's behavior yourself.