Mercadona Products API

PassAudited by ClawScan on May 5, 2026.

Overview

This instruction-only skill appears purpose-aligned, but receipt scanning sends receipt files or URLs to an unofficial external API and Gemini for processing.

This looks safe to use for product lookup and nutrition queries. Before using receipt scanning, remember that receipt images, PDFs, or URLs will be sent to mercaapi.sgn.space and may be processed by Gemini, so avoid uploading sensitive personal or payment information unless you are comfortable sharing it.

Findings (1)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If used for receipt scanning, receipt contents may be processed by the external API service and Gemini, not just locally by the user's agent.

Why it was flagged

Receipt files or receipt URLs may contain personal purchase details and are sent to an unofficial third-party API, with Gemini also involved in extraction; the artifact discloses this feature but does not describe retention or data boundaries.

Skill content
Unofficial REST API for Mercadona ... POST /api/ticket/ Upload a Mercadona receipt (image or PDF) ... The `/api/ticket/` endpoint uses AI (Gemini)
Recommendation

Only upload receipts you are comfortable sharing with the service; redact personal or payment details where possible, and ask the agent to confirm before sending receipt files or URLs.