OurGroceries Integration

Skill for interacting with OurGroceries.com to manage shopping lists. Use when you need to add items to grocery lists, check existing lists, or synchronize w...

This skill appears coherent and implements what it claims, but review the following before installing: 1) It requires your OurGroceries email and password (stored in env or optional local env file). Use a vault or dedicated account and avoid committing secrets. 2) The client simulates website login (HTTP calls to ourgroceries.com); review lib/ourgroceries/__init__.py to verify no unexpected remote endpoints beyond the site and that TLS is used (the code targets https://www.ourgroceries.com). 3) The devtools_network_monitor.js is a local browser snippet for debugging — it logs POST JSON to your browser console only; it does not exfiltrate data by itself. 4) references/api_reference.md contains a small inconsistency (it suggests 'pip install ourgroceries' while the repo vendors its own client and AGENTS.md warns not to pip install); prefer the vendored code here. 5) If you have low tolerance for storing account credentials, consider creating a throwaway OurGroceries account for automation. Finally, if you are not comfortable reading the vendored client, do not grant this skill access to your primary credentials.

Type: OpenClaw Skill Name: ourgroceries Version: 1.0.2 The ourgroceries skill provides a functional integration for managing shopping lists on OurGroceries.com. It uses a vendored Python client (lib/ourgroceries/) to interact with the service's unofficial API via aiohttp. The scripts (add_item.py, get_list.py, etc.) correctly handle authentication using environment variables and perform legitimate API actions like retrieving lists and adding items. No evidence of data exfiltration, malicious execution, or harmful prompt injection was found; the included devtools_network_monitor.js is a transparent utility for manual API debugging.