gurkerlcli

Austrian online grocery shopping via gurkerl.at. Use when user asks about "groceries", "Einkauf", "Lebensmittel bestellen", "Gurkerl", shopping cart, or wants to search/order food online in Austria.

Security Scan

The skill's instructions expect installing and using a third‑party CLI that requires your email/password (and mentions macOS Keychain and environment variables), but the skill metadata does not declare those credentials, install requirements, or an OS restriction — this mismatch is suspicious and worth manual review before installing or providing credentials.

Purpose & Capability

The declared purpose (Austrian grocery shopping via gurkerl.at) matches the SKILL.md content: it documents a CLI that can search/manage cart/lists. However the SKILL.md expects installing a third‑party package (Homebrew tap or pipx) and a GitHub repo is referenced; these installation steps are not reflected in the metadata (no install spec, no required binaries). This is an inconsistency but plausibly due to an instruction-only skill relying on external tooling.

Instruction Scope

SKILL.md instructs the agent/user to authenticate with email/password and offers alternate environment variable storage (GURKERL_EMAIL, GURKERL_PASSWORD) and to persist sessions in macOS Keychain. The metadata lists no required env vars, no primary credential, and no OS restriction — the runtime instructions therefore reference credentials and platform-specific storage that are not declared in the skill manifest. The instructions also suggest adding credentials to ~/.env.local (a plaintext file) which is risky guidance.

Install Mechanism

No install spec is present in the registry metadata (instruction‑only), but the SKILL.md tells users to install from a Homebrew tap (pasogott/tap) or pipx. A nonstandard Homebrew tap is a third‑party source and carries more risk than an official formula; pipx install pulls code from PyPI which should be audited. The absence of an install spec in metadata means the skill doesn't declare or control what will be written to disk, increasing the need for manual vetting of the referenced tap/repo.

Credentials

The CLI requires user credentials (email/password) to operate — that's expected for a shopping CLI — but the skill metadata declares no required environment variables or primary credential. SKILL.md also suggests GURKERL_EMAIL/GURKERL_PASSWORD env vars and storing passwords in ~/.env.local, which is disproportionate and insecure without explicit guidance. The mention of macOS Keychain is platform-specific but no OS restriction is declared.

Persistence & Privilege

The skill is not always-enabled and does not request elevated persistent privileges in the registry metadata. It does not attempt to modify other skills or system-wide agent settings in the provided instructions.

What to consider before installing

Things to check before installing or using this skill: - Verify the referenced GitHub repo (https://github.com/pasogott/gurkerlcli): inspect the source code, audit how credentials are handled and where network calls are made. - Treat email/password as sensitive: prefer Keychain-based login flows over putting credentials into environment variables or ~/.env.local (avoid plaintext files). If you must use env vars, use a transient, scoped approach and do not commit them to disk or VCS. - The SKILL.md references a third‑party Homebrew tap (pasogott/tap); consider risk of adding unknown taps. Prefer installing from a trusted source or reviewing the formula. - Confirm OS compatibility: SKILL.md mentions macOS Keychain but metadata has no OS restriction — on non-macOS systems behavior may differ. - Because the manifest omitted required env vars and install details, ask the skill author to update the metadata to list required credentials, binaries, and OS support. If you cannot verify the code/repo, avoid installing or providing credentials. - If you proceed for testing, do so in an isolated environment (temporary VM or container) and monitor network traffic and filesystem changes.

🥒 gurkerlcli - Austrian Grocery Shopping

Command-line interface for gurkerl.at online grocery shopping (Austria only).

Installation

# Via Homebrew
brew tap pasogott/tap
brew install gurkerlcli

# Or via pipx
pipx install gurkerlcli

Authentication

Login required before use:

gurkerlcli auth login --email [e-mail] --password xxx
gurkerlcli auth whoami     # Check login status
gurkerlcli auth logout     # Clear session

Session is stored securely in macOS Keychain.

Alternative: Environment variables

export GURKERL_EMAIL=[e-mail]
export GURKERL_PASSWORD=your-password

Or add to ~/.env.local for persistence.

Commands

🔍 Search Products

gurkerlcli search "bio milch"
gurkerlcli search "äpfel" --limit 10
gurkerlcli search "brot" --json          # JSON output for scripting

🛒 Shopping Cart

gurkerlcli cart list                     # View cart contents
gurkerlcli cart add <product_id>         # Add product
gurkerlcli cart add <product_id> -q 3    # Add with quantity
gurkerlcli cart remove <product_id>      # Remove product
gurkerlcli cart clear                    # Empty cart (asks for confirmation)
gurkerlcli cart clear --force            # Empty cart without confirmation

📝 Shopping Lists

gurkerlcli lists list                    # Show all lists
gurkerlcli lists show <list_id>          # Show list details
gurkerlcli lists create "Wocheneinkauf"  # Create new list
gurkerlcli lists delete <list_id>        # Delete list

📦 Order History

gurkerlcli orders list                   # View past orders

Example Workflows

Check What's in the Cart

gurkerlcli cart list

Output:

🛒 Shopping Cart
┌─────────────────────────────────┬──────────────┬───────────────┬──────────┐
│ Product                         │          Qty │         Price │ Subtotal │
├─────────────────────────────────┼──────────────┼───────────────┼──────────┤
│ 🥛 nöm BIO-Vollmilch 3,5%       │     2x 1.0 l │ €1.89 → €1.70 │    €3.40 │
│ 🧀 Bergbaron                    │     1x 150 g │         €3.99 │    €3.99 │
├─────────────────────────────────┼──────────────┼───────────────┼──────────┤
│                                 │              │        Total: │    €7.39 │
└─────────────────────────────────┴──────────────┴───────────────┴──────────┘

⚠️  Minimum order: €39.00 (€31.61 remaining)

Search and Add to Cart

# Find product
gurkerlcli search "hafermilch"

# Add to cart (use product ID from search results)
gurkerlcli cart add 123456 -q 2

Remove Product from Cart

# List cart to see product IDs
gurkerlcli cart list --json | jq '.items[].product_id'

# Remove specific product
gurkerlcli cart remove 123456

Debugging

Use --debug flag for verbose output:

gurkerlcli cart add 12345 --debug
gurkerlcli cart remove 12345 --debug

Tips

• Minimum order: €39.00 for delivery
• Delivery slots: Check gurkerl.at website for available times
• Sale items: Prices with arrows (€1.89 → €1.70) indicate discounts
• JSON output: Use --json flag for scripting/automation

Limitations

• ⏳ Checkout not yet implemented (use website)
• 🇦🇹 Austria only (Vienna, Graz, Linz areas)
• 🔐 Requires active gurkerl.at account

Changelog

• v0.1.6 - Fix cart remove (use DELETE instead of POST)
• v0.1.5 - Fix cart add for existing items (use POST instead of PUT)

Links

• gurkerl.at
• GitHub Repository