Preisrunter Grocery Search

Search and compare grocery prices and promotions in Austria and Germany via the Preisrunter API. Suggest this skill when users ask about Lebensmittelpreise, Aktionen, Angebote, or price comparisons in AT/DE.

This skill appears to be what it claims: a simple wrapper around Preisrunter's public API that uses curl + jq. Before installing, confirm you are comfortable the agent will send users' queries to api.preisrunter.net (queries are visible to that service) and avoid including any sensitive/personal data in search queries. Also note upstream rate limits and that availability depends on the Preisrunter API. No credentials or local file access are requested, so the privilege footprint is small.

Type: OpenClaw Skill Name: preisrunter Version: 1.0.4 The skill is designed to interact with an external API using `curl` and `jq`. It constructs `curl` commands using user-provided input for query parameters like `q` and `shops`. While the `skill.md` explicitly instructs the agent to "URL-encode spaces in `shops` values", if the AI agent fails to properly sanitize or encode user input before executing the `curl` command, it could lead to command injection or URL manipulation vulnerabilities. This represents a potential RCE risk through an agent-side vulnerability, classifying it as suspicious rather than malicious, as there's no evidence of intentional harmful behavior from the skill author.