checkers-sixty60
v1.0.0Shop on Checkers.co.za Sixty60 delivery service via browser automation. Use when the user asks to shop for groceries, add items to cart, order from Checkers, or manage their Checkers shopping basket. Handles delivery type selection, product search, backup preferences, regular item reordering, and deal evaluation.
⭐ 1· 1.9k·1 current·1 all-time
by@snopoke
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Suspicious
medium confidencePurpose & Capability
Name/description and SKILL.md align: instructions are focused on shopping, filtering for Sixty60 items, adding items, backups, reorders, and deal evaluation. However, the skill claims to operate “via browser automation” but declares no required binaries, tools, or environment assumptions — a missing dependency specification that should be justified (e.g., Playwright/Selenium or an existing authenticated browser session).
Instruction Scope
Runtime instructions stay within the shopping domain: navigate UI, search, add/remove items, verify cart state, and handle backups and deals. The agent is instructed to verify outcomes rather than assume success and not asked to read unrelated system files or exfiltrate data. Instructions do require taking snapshots and verifying on-screen address/delivery info, which is appropriate for the task.
Install Mechanism
Instruction-only skill with no install spec or code files — lowest install risk. Nothing is written to disk by the skill itself.
Credentials
The SKILL.md implicitly requires an authenticated Checkers session or a browser automation runtime capable of authenticating/acting on behalf of the user, but it declares no credentials, env vars, or guidance for safe authentication. That ambiguity can lead to unsafe behaviors (asking the user for login credentials, storing them improperly, or attempting to reuse unrelated sessions). The skill also advises taking snapshots of the UI (which may include personal data like addresses) but gives no guidance on handling or redaction of sensitive information.
Persistence & Privilege
Skill is not always-enabled, has no install-time persistence, and does not request system-wide privileges or modify other skill configurations.
What to consider before installing
This skill's behavior is coherent for shopping on Checkers, but it omits how it expects to run. Before installing or using it, verify: (1) your agent platform provides a browser-automation runtime (Playwright/Selenium) and an authenticated Checkers session — otherwise the skill may prompt for credentials; (2) how any snapshots or screenshots will be stored, redacted, and transmitted (they can include addresses and personal info); (3) that the agent will require explicit user confirmation before placing orders or saving payment info. Avoid entering account passwords directly into a skill prompt; prefer using pre-authenticated browser sessions or official APIs. If you are uncomfortable with these gaps, do not enable the skill or ask the publisher for clarification on authentication and handling of sensitive data.Like a lobster shell, security has layers — review code before you run it.
latestvk9763t2jcfzah1p0k5h9vxx0kh7znshc
License
MIT-0
Free to use, modify, and redistribute. No attribution required.