Security audit
Security checks for vulnerabilities and agentic risk
This skill is a clearly disclosed Mealie integration that uses a user-provided API token to manage recipes, meal plans, and shopping lists, with broad but purpose-aligned API access.
Install this only for a Mealie account you control, use an API token with the minimum permissions needed, and review requests before destructive, administrative, bulk, upload, download, or optional AI actions because those can change or transmit recipe and household data.
Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.
# Local credentials
.env
.env.*
!.env.example
Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.
Replace the example values. Use your instance's canonical URL, including any installation prefix, but do not append /api. Edit an existing .env without removing other entries. Keep it outside this repository and protect it:
chmod 600 ~/.openclaw/.env
Adjust the path if you use a custom state directory. No openclaw.json entry is required. Restart the OpenClaw Gateway and start a fresh session after updating .env.
Code enumerates, copies, or searches environment variables for secrets. Bulk environment access can collect credentials unrelated to the skill's stated purpose.
self.directory = Path(self.tempdir.name)
def cli(self, *args):
environment = os.environ.copy()
environment.update(MEALIE_URL=self.url, MEALIE_API_TOKEN=TOKEN)
return subprocess.run(
[sys.executable, str(HELPER), *args], env=environment,
Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.
mkdir -p ~/.openclaw/workspace/skills
git clone https://github.com/Lanjelin/openclaw-mealie.git ~/.openclaw/workspace/skills/mealie
Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.
Replace the example values. Use your instance's canonical URL, including any installation prefix, but do not append /api. Edit an existing .env without removing other entries. Keep it outside this repository and protect it:
chmod 600 ~/.openclaw/.env
Adjust the path if you use a custom state directory. No openclaw.json entry is required. Restart the OpenClaw Gateway and start a fresh session after updating .env.
The skill exposes meaningful capabilities through shell execution of a Python helper plus access to environment-backed credentials and network/API operations, but it does not declare an explicit tool scope such as permissions or allowed-tools. That makes the effective privilege boundary implicit rather than enforced, increasing the risk of overbroad execution, unintended file or network access, and misuse of the Mealie API token if the runtime grants more tools than the skill strictly needs.
subprocess module calls execute external commands. Without careful input validation, this enables command injection.
def run(args):
if args.command == 'extract-pdf':
result = subprocess.run(['pdftotext', '-layout', str(Path(args.file).resolve()), '-'], capture_output=True)
if result.returncode:
raise ClientError(result.stderr.decode(errors='replace'))
text = result.stdout.decode('utf-8')
subprocess module calls execute external commands. Without careful input validation, this enables command injection.
def cli(self, *args):
environment = os.environ.copy()
environment.update(MEALIE_URL=self.url, MEALIE_API_TOKEN=TOKEN)
return subprocess.run(
[sys.executable, str(HELPER), *args], env=environment,
capture_output=True, timeout=15,
)
No suspicious patterns detected.