Security checks across malware telemetry and agentic risk
This grocery skill appears purpose-built rather than malicious, but it needs review because it handles reusable Kroger login tokens through a hosted proxy and asks agents to persist them.
Review before installing if you plan to use cart or profile features. Product and store searches are lower risk; account features require Kroger login and expose refresh tokens to the hosted proxy and, per the skill instructions, to agent long-term memory. Prefer self-hosting or local CLI mode with your own Kroger credentials for tighter control, avoid saving refresh tokens in agent memory unless you know how to remove or revoke them, and require confirmation before any cart changes.
After the user says they've logged in, poll for their tokens:
```bash
curl -s "https://us-central1-krocli.cloudfunctions.net/tokenUser?session_id=SESSION_ID"
```
- If `{"status": "pending"}` with HTTP 202: user hasn't finished yet. Wait and retry.-H "Authorization: Bearer USER_ACCESS_TOKEN" \
-H "Content-Type: application/json" \
-H "Accept: application/json" \
"https://api.kroger.com/v1/cart/add" \
-d '{"items": [{"upc": "0011110838049", "quantity": 1}]}'
``````bash curl -s -H "Authorization: Bearer USER_ACCESS_TOKEN" \ -H "Accept: application/json" \ "https://api.kroger.com/v1/identity/profile" ``` ## Refreshing an Expired User Token
func defaultOpenKeyring() (keyring.Keyring, error) {
return keyring.Open(keyring.Config{
ServiceName: serviceName,
AllowedBackends: []keyring.BackendType{keyring.KeychainBackend, keyring.SecretServiceBackend, keyring.WinCredBackend, keyring.FileBackend},
FileDir: defaultFileDir(),
FilePasswordFunc: keyring.FixedStringPrompt("krocli"),
})66/66 vendors flagged this skill as clean.