Gousto Recipes
PassAudited by ClawScan on May 1, 2026.
Overview
This skill appears to do what it claims: search and fetch public Gousto recipes using simple shell scripts, with no credentials or suspicious data handling.
This looks safe for normal recipe browsing if you are comfortable with the skill using curl to contact Gousto and storing a local recipe cache. If third-party proxy use matters to you, check that the vfjr.dev reference is just stale documentation before installing.
Findings (1)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
A user could be briefly confused about whether recipe requests go directly to Gousto or through a proxy, although the provided code shows direct Gousto API calls.
The skill documentation gives inconsistent descriptions of the recipe-fetch network path. The included scripts use the Gousto production API, but users may want to verify the intended endpoint if they care about third-party proxy use.
**Official Gousto API** ... `https://production-api.gousto.co.uk/...` ... `Recipe fetch requires network (vfjr.dev proxy)`
Clarify the documentation by removing the vfjr.dev proxy reference or explaining exactly when it is used.