← Back to Skills Marketplace
Ordercli
by
Peter Steinberger
· GitHub ↗
· v1.0.0
11404
Downloads
4
Stars
1032
Active Installs
1
Versions
Install in OpenClaw
/install ordercli
Description
Foodora-only CLI for checking past orders and active order status (Deliveroo WIP).
Usage Guidance
Install only if you trust the ordercli package and intentionally want to let it access your Foodora account. Treat Chrome cookie or session import as sensitive account delegation; prefer password-stdin or a dedicated browser profile when possible, and check where the CLI stores imported sessions and how to delete them.
Capability Analysis
Type: OpenClaw Skill
Name: ordercli
Version: 1.0.0
The skill bundle is suspicious due to instructions in `SKILL.md` that direct the agent to execute commands accessing sensitive browser data. Specifically, `ordercli foodora cookies chrome --profile "Default"` and `ordercli foodora session chrome --url https://www.foodora.at/ --profile "Default"` instruct the agent to read Chrome browser cookies and session information. While framed as importing for the `ordercli` tool's functionality, this capability represents a significant security risk, as it involves accessing data from another application (Chrome) that could contain credentials or session tokens, making it a potential vector for data exfiltration if the `ordercli` binary itself were compromised or malicious.
Capability Assessment
Purpose & Capability
Checking Foodora orders and active status reasonably requires account authentication, and the skill discloses password, browser, cookie, and session-based login workflows.
Instruction Scope
The instructions include commands that read Chrome Default profile cookies or session state, including a no-password session import, but do not clearly require explicit user approval or explain exactly which cookies are read.
Install Mechanism
Installation is disclosed through Homebrew or Go for the ordercli binary; the artifact itself contains only a markdown skill file and no bundled executable scripts.
Credentials
Accessing browser cookies/session data is sensitive local profile access. It is related to the stated login purpose, but stronger scope and user-control guidance is needed.
Persistence & Privilege
The session import likely creates reusable account access for the CLI, but the skill does not describe token storage, retention, deletion, or containment boundaries.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install ordercli - After installation, invoke the skill by name or use
/ordercli - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Metadata
Frequently Asked Questions
What is Ordercli?
Foodora-only CLI for checking past orders and active order status (Deliveroo WIP). It is an AI Agent Skill for Claude Code / OpenClaw, with 11404 downloads so far.
How do I install Ordercli?
Run "/install ordercli" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Ordercli free?
Yes, Ordercli is completely free (open-source). You can download, install and use it at no cost.
Which platforms does Ordercli support?
Ordercli is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Ordercli?
It is built and maintained by Peter Steinberger (@steipete); the current version is v1.0.0.
More Skills