Wolt Orders
ReviewAudited by ClawScan on May 1, 2026.
Overview
The skill is coherent and purpose-aligned, but it handles Wolt login/session, saved payment checkout, live order monitoring, and optional Slack/channel updates for real orders.
This skill does not show artifact-backed malicious behavior. Install/use it only if you are comfortable letting the agent operate a logged-in Wolt browser session, and always review the cart, address, total, payment method, support messages, and notification channel before approving actions.
Findings (4)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The agent may operate inside the user's Wolt account using a persistent logged-in browser session.
The skill is expected to log into Wolt, but it will handle account credentials/session cookies, which is sensitive delegated account access.
User must provide Wolt credentials on first use (email/phone + password or OTP flow). Store session securely via browser cookies/profile.
Use a trusted browser profile, confirm the Wolt account before ordering, and sign out or revoke the session if you no longer want the skill to have access.
A mistaken confirmation could result in a real paid food order being placed.
The skill can use the browser to complete paid checkout with a saved payment method, but the instructions explicitly require user confirmation before placing an order.
Confirm delivery address, payment method (use saved if available). ... Require explicit user confirmation ("yes/confirm/place it"). Place order.Before confirming, verify restaurant, items, quantities, address, total price, fees, ETA, and payment method.
People in the selected channel may see food order details, tracking links, support messages, or other personal delivery information.
The skill may send order links, tracking details, and support updates to Slack or other connected channels, which can expose order information to channel members.
Retrieve and share the group order link via channel_send (e.g., Slack thread). ... Push delay alerts and support updates to channel.
Specify the exact channel for notifications and avoid sending order or tracking links to broad or public channels.
The agent may keep checking order status and sending updates while watch mode is active.
The skill can continue monitoring an order during a conversation. This is disclosed and purpose-aligned, but users should bound how long monitoring and notifications continue.
Support live polling ("watch mode") in ongoing conversation.Use watch mode only for a specific active order and tell the agent when to stop monitoring.