Open Food Facts API
v1.0.0Interact with the Open Food Facts API to search for packaged food products by barcode and retrieve nutritional information. Use when the user asks to look up...
⭐ 0· 57·0 current·0 all-time
byPatrik Ekenberg@patello
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name and description match the included scripts and declared binaries. The skill only needs curl and jq to query the Open Food Facts v2 API for product search and barcode lookups; no additional credentials, config paths, or unrelated binaries are requested.
Instruction Scope
SKILL.md and the two shell scripts confine behavior to making HTTPS GET requests to https://world.openfoodfacts.org/api/v2 and formatting the JSON response. The scripts do not read arbitrary files, environment variables, or send data to other endpoints. Error handling and output formatting are local to the scripts.
Install Mechanism
No install spec is provided (instruction-only with bundled scripts). Nothing in the skill downloads or installs additional code from third-party URLs or writes arbitrary archives to disk.
Credentials
No environment variables or credentials are required or declared. The skill does not request secrets or access to unrelated services; its network access is appropriate for querying the public Open Food Facts API.
Persistence & Privilege
The skill does not request persistent/global privileges. always is false, and the skill does not modify other skills or system-wide agent settings. disable-model-invocation is the normal default and not a concern here.
Assessment
This skill appears coherent and limited: it will run shell scripts that make outgoing HTTPS requests to world.openfoodfacts.org and format the JSON responses with jq. No API keys or secrets are requested. Before installing, be aware that: (1) network access to the Open Food Facts site is required; (2) queries with spaces should be quoted (the search script does not URL-encode the query); and (3) rate limits apply (documented in SKILL.md). If you want extra assurance, review the two included shell scripts yourself (they are short and readable) or run them in a restricted environment.Like a lobster shell, security has layers — review code before you run it.
latestvk970ebhzhb4aza5m93mmra628n83swa3
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
Binscurl, jq