saizeriya

AdvisoryAudited by Static analysis on May 5, 2026.

Overview

No suspicious patterns detected.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If used as intended, the agent may help place an order or call staff only after confirmation, but the user should carefully review those confirmations.

Why it was flagged

The skill can trigger real-world restaurant actions through the CLI, but it explicitly requires user confirmation for the highest-impact commands.

Skill content
Ask for explicit confirmation before `submit`, `call staff`, or `call dessert`.
Recommendation

Only confirm submit/call actions after checking the exact restaurant session, cart contents, quantities, and intended action.

What this means

The agent may operate a dining session that could reveal receipt/account details and affect the current order.

Why it was flagged

A QR URL/session can delegate access to a live mobile-ordering session, including cart changes and account/receipt views.

Skill content
start <name> <qrurl> ... manage a cart, view account or receipt details
Recommendation

Provide QR URLs or photos only for sessions you want the agent to operate, and avoid sharing sessions for other tables or accounts.

What this means

The runtime behavior depends on packages fetched or resolved outside this skill’s artifacts.

Why it was flagged

The skill relies on external CLI packages executed through npx/bunx without pinned versions in the provided artifacts.

Skill content
npx saizeriya.js help ... npx -y qr-scanner-cli /path/to/qr-photo.jpg --clear
Recommendation

Use trusted package sources, consider pinning package versions, and review package provenance before using it in a sensitive environment.

What this means

Ordering session identifiers or state may remain on the local machine and be reused in later interactions.

Why it was flagged

The CLI may persist session state locally, and the skill can later list, resume, or remove those sessions.

Skill content
Set `SAIZERIYA_CLI_HOME` only when the user wants a custom session storage directory. Otherwise let the CLI use its default session store.
Recommendation

Use a dedicated SAIZERIYA_CLI_HOME for sensitive sessions and remove sessions with the CLI when they are no longer needed.