Walmart

PassAudited by ClawScan on May 1, 2026.

Overview

This instruction-only Walmart shopping helper is coherent and disclosed, but users should notice that optional browser-assisted mode can use their Walmart session and local shopping memory.

This appears reasonable for a Walmart grocery planning skill. Before installing, decide whether you want planning-only mode or browser-assisted ordering, keep checkout and account changes under your direct confirmation, and review any local notes saved in ~/walmart/.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If browser-assisted mode is enabled, mistakes could affect a real Walmart cart or order, though the skill instructs the agent to get confirmation before final changes.

Why it was flagged

Browser automation can modify a cart or ordering workflow, but the instructions frame this as user-mediated and confirmation-gated.

Skill content
Good browser-automation tasks: add or remove items from a draft basket; set fulfillment mode to pickup, delivery, or shipping; ... require explicit confirmation before checkout or order mutation
Recommendation

Use planning-only mode unless you want browser assistance, keep the browser session visible, and confirm every checkout or order-change step yourself.

What this means

The agent may see account/order pages and help with actions tied to the user's Walmart account if the user enables that mode.

Why it was flagged

The skill may operate inside the user's Walmart account session for live ordering or support, including sensitive account-adjacent workflows, but it discloses this and requires confirmation.

Skill content
For live ordering or account support: access to the user's Walmart site or app session ... For pharmacy-related tasks: explicit user confirmation before any refill or account change workflow
Recommendation

Do not share passwords, payment details, insurance information, or prescription identifiers in chat; log in directly through Walmart and approve only the specific account actions you want.

What this means

Local notes could reveal household shopping patterns, preferences, budget, allergies, or substitution rules and may affect future recommendations.

Why it was flagged

The skill maintains persistent local shopping context that can influence future baskets, while setting clear limits on what should be stored.

Skill content
Store only approved local notes in ~/walmart/: store choice, pack size preferences, restock cadence, and substitution boundaries. Never store payment data, login secrets, insurance information, or detailed medical data.
Recommendation

Review the ~/walmart/ notes periodically, keep sensitive health/payment/account details out of them, and correct or delete outdated preferences.