Recipes
v1.0.0Build a personal recipe collection with ingredients, scaling, and meal planning.
⭐ 2· 1.2k·1 current·1 all-time
byIván@ivangdavila
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Suspicious
medium confidencePurpose & Capability
The name/description (recipe collection, scaling, meal planning) aligns with the SKILL.md behavior (storing markdown recipes, indexing, meal plans). However the instructions assume capabilities (fetch URL content, OCR photos, transcribe voice, create ~/recipes/) without declaring needed tools, services, or constraints — a mild mismatch between claimed capability and declared requirements.
Instruction Scope
SKILL.md instructs the agent to 'fetch and extract' from arbitrary URLs and to 'extract text' from photos/voice/handwritten recipes but does not specify whether processing happens locally or via third‑party services, nor which endpoints are allowed. It also directs creating and writing files under ~/recipes. These open-ended instructions grant broad discretion about network access and where sensitive recipe images/audio might be sent, which could lead to unintended data transmission.
Install Mechanism
This is an instruction-only skill with no install spec and no code files — lowest install risk. Nothing will be written to disk by an installer.
Credentials
The skill requests no environment variables, credentials, or config paths. That is proportionate for its stated purpose; there are no unrelated secret requests.
Persistence & Privilege
always is false and there is no indication the skill modifies other skills or system-wide settings. It does expect to create and write to ~/recipes (normal for this purpose) but does not request elevated privileges.
What to consider before installing
This skill appears to do what it says (local recipe collection, scaling, meal planning) but is vague about runtime behavior: before installing, confirm how the agent will fetch URLs and process images/audio — will OCR or speech-to-text run locally, or will data be uploaded to external services? Also verify that the agent/platform will ask for permission before creating/writing files under ~/recipes and consider whether you want to allow autonomous invocation. If you care about privacy of scanned handwritten recipes or voice notes, ask the skill author to explicitly document processing endpoints, retention, and whether uploads are encrypted or kept local.Like a lobster shell, security has layers — review code before you run it.
latestvk97877b3bmq7f9sc4zbm0rv14d80xgr2
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🍳 Clawdis
OSLinux · macOS · Windows