Plan2meal

Manage recipes and grocery lists from your Plan2Meal React Native app. Add recipes from URLs, search, view, and manage your grocery lists.

Install only if you intend to connect Plan2Meal to a Convex backend and OAuth provider. Prefer your own CONVEX_URL, enable ALLOW_DEFAULT_BACKEND only if you accept the shared backend, keep OAuth callback URLs tight, and update/lock npm dependencies before deploying from source.

Type: OpenClaw Skill Name: plan2meal Version: 1.2.5 The OpenClaw AgentSkills skill bundle for Plan2Meal appears benign. It provides recipe and grocery list management by interacting with a Convex backend and standard OAuth providers (GitHub, Google, Apple). The code is well-structured, uses `axios` for network requests, and includes `markdownEscape` for output sanitization. There is no evidence of intentional data exfiltration, malicious execution (e.g., `eval`, `child_process`), persistence mechanisms, or obfuscation. The `SKILL.md` and `README.md` files contain appropriate guardrails and transparency disclosures regarding data routing and backend usage, without any signs of prompt injection attempts to manipulate the agent into harmful actions. The delegation of recipe URL fetching and parsing to the Convex backend (via `src/convex.ts` and `src/commands.ts`) shifts potential web scraping vulnerabilities to the backend service, rather than being a direct flaw or malicious intent within the skill itself.