← Back to Skills Marketplace
425
Downloads
1
Stars
1
Active Installs
1
Versions
Install in OpenClaw
/install grocy-inventory
Description
Manage Grocy inventory, shopping list, batteries, and barcodes. Use when user wants to: (1) Check what's in their fridge/pantry, (2) See expiring products, (...
README (SKILL.md)
Grocy Inventory Skill
Check and manage your Grocy inventory, shopping list, and batteries. This skill connects to your local Grocy instance.
Configuration
| Variable | Value |
|---|---|
| URL | http://localhost:14611 |
| API Key | mz43yGJzBKfwZdSOwG5EdnKPRrKnCbkGrEFbxXYv2JF61tQ9Mj |
Quick Commands
Check Stock (Fridge/Pantry)
curl -s -H "GROCY-API-KEY: $API_KEY" "$URL/api/stock"
Lookup Details by Barcode
curl -s -H "GROCY-API-KEY: $API_KEY" "$URL/api/stock/products/by-barcode/{barcode}"
Consume Stock by Barcode
curl -s -X POST -H "GROCY-API-KEY: $API_KEY" \
-H "Content-Type: application/json" \
-d '{"amount": 1, "transaction_type": "consume"}' \
"$URL/api/stock/products/by-barcode/{barcode}/consume"
Mark Stock as Opened by Barcode
curl -s -X POST -H "GROCY-API-KEY: $API_KEY" \
-H "Content-Type: application/json" \
-d '{"amount": 1}' \
"$URL/api/stock/products/by-barcode/{barcode}/open"
Transfer Stock by Barcode
curl -s -X POST -H "GROCY-API-KEY: $API_KEY" \
-H "Content-Type: application/json" \
-d '{"amount": 1, "location_id_from": 6, "location_id_to": 2}' \
"$URL/api/stock/products/by-barcode/{barcode}/transfer"
Get All Batteries
curl -s -H "GROCY-API-KEY: $API_KEY" "$URL/api/batteries"
Track Battery Charge
curl -s -X POST -H "GROCY-API-KEY: $API_KEY" \
-H "Content-Type: application/json" \
-d '{"battery_id": 7}' \
"$URL/api/batteries/7/charge"
Common Tasks
| Task | Command |
|---|---|
| Find product by barcode | GET /api/stock/products/by-barcode/{barcode} |
| Consume by barcode | POST /api/stock/products/by-barcode/{barcode}/consume |
| Open by barcode | POST /api/stock/products/by-barcode/{barcode}/open |
| Transfer by barcode | POST /api/stock/products/by-barcode/{barcode}/transfer |
| Check battery status | GET /api/batteries |
| Track battery charge | POST /api/batteries/{id}/charge |
Tips
- Use
jqfor pretty JSON logs:curl ... | jq - For barcodes, use the direct
/by-barcode/{barcode}endpoints found in theStock "by-barcode"tags. - Full API docs: See
references/grocy-api.md
Usage Guidance
This skill otherwise behaves like a normal Grocy client, but the SKILL.md embeds a plaintext API key and shows $API_KEY without declaring it as a required environment variable. Before installing or enabling: (1) Treat the API key in the docs as potentially sensitive — do not assume it's a harmless placeholder. If it's your Grocy key, rotate it. (2) Prefer the publisher to remove hardcoded keys from the skill and require the user to provide GROCY_URL and GROCY_API_KEY via environment variables or config. (3) Remember the skill's commands are state-changing (consume/add/transfer); if you allow autonomous invocations, the agent could modify your local inventory. (4) If you do not run Grocy on localhost:14611, there's no legitimate reason for the skill to access that URL. Ask the publisher to clarify whether the API key is a sample and to update instructions to not include secrets.
Capability Analysis
Type: OpenClaw Skill
Name: grocy-inventory
Version: 1.0.0
The skill bundle contains a hardcoded API key in SKILL.md for a local Grocy instance (http://localhost:14611). While the logic and documentation in SKILL.md and references/grocy-api.md are consistent with the stated purpose of inventory management, hardcoding credentials is a significant security vulnerability. There is no evidence of intentional data exfiltration or malicious redirection to external domains.
Capability Assessment
Purpose & Capability
Name/description align with the instructions: all commands target a local Grocy instance and perform expected inventory and battery operations. However, the skill includes a hardcoded API key in SKILL.md and references an $API_KEY variable despite the skill declaring no required env vars — this is inconsistent with the stated minimal configuration.
Instruction Scope
Instructions only call the local Grocy API (http://localhost:14611) and use curl for both read and state-changing operations (consume, add, transfer, charge). That's in-scope for an inventory skill, but the doc embeds a plaintext API key and uses an undefined $API_KEY variable. The presence of a concrete API key in the skill text is unexpected and could expose credentials if it is real. Also note: the skill's commands will modify local state (consume/transfer/add) when invoked.
Install Mechanism
No install spec and no code files — instruction-only skill. This minimizes disk footprint and reduces supply-chain risk.
Credentials
Registry metadata declares no required env vars or credentials, yet SKILL.md shows a specific API Key value and expects $API_KEY in examples. Requesting no secrets but shipping a concrete API key in the documentation is disproportionate and inconsistent. If that key is valid it grants full access to the local Grocy instance; if it's a leaked credential, it should be rotated.
Persistence & Privilege
always is false and the skill does not request persistent system-level privileges. It will act against localhost endpoints when invoked, which is normal for a local-service integration.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install grocy-inventory - After installation, invoke the skill by name or use
/grocy-inventory - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release – manage your Grocy inventory and batteries with essential endpoints.
- Check fridge or pantry stock via the Grocy API.
- Find and manage products using barcodes (lookup, consume, open, transfer).
- View and track rechargeable battery status and charging.
- Example curl commands provided for all supported actions.
- Connects to a local Grocy instance at http://localhost:14611.
Metadata
Frequently Asked Questions
What is Grocy Inventory?
Manage Grocy inventory, shopping list, batteries, and barcodes. Use when user wants to: (1) Check what's in their fridge/pantry, (2) See expiring products, (... It is an AI Agent Skill for Claude Code / OpenClaw, with 425 downloads so far.
How do I install Grocy Inventory?
Run "/install grocy-inventory" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Grocy Inventory free?
Yes, Grocy Inventory is completely free (open-source). You can download, install and use it at no cost.
Which platforms does Grocy Inventory support?
Grocy Inventory is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Grocy Inventory?
It is built and maintained by septianw (@septianw); the current version is v1.0.0.
More Skills