Fridge
PassAudited by ClawScan on May 1, 2026.
Overview
Fridge appears to be a local household inventory tool, with the main considerations being persistent local logs and an unclear install path for the documented CLI command.
This skill looks reasonable for local fridge and pantry tracking. Before installing, confirm how the `fridge` command is installed or run, and remember that anything you log may persist in `~/.local/share/fridge/` until you remove it.
Findings (2)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The skill may not work unless the `fridge` command is installed separately, and users should make sure they know which executable they are running.
The SKILL.md tells users to run `fridge` commands and the manifest includes `scripts/script.sh`, but the registry does not define how the CLI is installed or declare a required binary. This is a setup/provenance gap rather than evidence of malicious behavior.
No install spec — this is an instruction-only skill.
Verify the source and installation method for the `fridge` CLI before using it, especially if installing it outside the reviewed skill package.
Items, reminders, costs, and activity history you enter can be stored locally and later searched, viewed, or exported.
The script creates a persistent local data directory and logs user-supplied inventory/activity entries there. This matches the skill purpose and is disclosed, but it means household and cost information remains on disk.
DATA_DIR="${HOME}/.local/share/fridge"
mkdir -p "$DATA_DIR"
_log() { echo "$(date '+%m-%d %H:%M') $1: $2" >> "$DATA_DIR/history.log"; }Avoid entering information you do not want stored locally, and periodically review or delete `~/.local/share/fridge/` if needed.