Fridge
v2.0.1Track fridge and pantry inventory with expiry reminders and grocery lists. Use when logging groceries, checking expiry dates, or building shopping lists.
⭐ 0· 197·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description match the provided behavior: the script implements local inventory, reminders, export, and search. Minor mismatch: SKILL.md and help text refer to a 'fridge' CLI command but there is no install specification that places the included scripts/script.sh on PATH — the user must install or symlink the script manually.
Instruction Scope
SKILL.md instructs the user/agent to run local CLI commands. The included script reads and writes only to a per-user directory ($HOME/.local/share/fridge) and uses standard local utilities (grep, tail, du, wc). There are no network endpoints, external uploads, or references to unrelated system files or credentials.
Install Mechanism
No install spec is provided (instruction-only), which reduces install risk. A code file (scripts/script.sh) is included but not automatically installed; this is low risk but means the user must take manual steps to make the 'fridge' command available.
Credentials
The skill declares no required environment variables, no credentials, and no config paths beyond its local data directory. The requested access (read/write under the user's HOME) is proportionate to the stated purpose.
Persistence & Privilege
always is false and the skill does not request permanent elevated privileges or modify other skill or system configurations. It writes only to its own data directory.
Assessment
This skill appears to do what it claims: an offline CLI for fridge/pantry tracking that stores data under ~/.local/share/fridge. Before installing or running, (1) inspect scripts/script.sh yourself and, if you install it, place it in a trusted location (e.g., ~/bin) rather than running as root; (2) be aware data is stored in your HOME directory — back up or secure that directory if needed; (3) there is no automatic installer, so you must install or symlink the script if you want a 'fridge' command; (4) if you plan to share a machine, check file permissions to avoid other users reading your data; and (5) note a minor bug in the JSON export formatting may produce an extra literal "\n]" rather than a proper newline—review output files if you rely on valid JSON. Overall there are no obvious requests for credentials or network access, so risks are limited to the usual file-permissions and installation considerations.Like a lobster shell, security has layers — review code before you run it.
latestvk9773pbs89jm086q2j4e7vbwbn834m1g
License
MIT-0
Free to use, modify, and redistribute. No attribution required.