← Back to Skills Marketplace
1999
Downloads
1
Stars
2
Active Installs
1
Versions
Install in OpenClaw
/install picnic
Description
Order groceries from Picnic supermarket - search products, manage cart, schedule delivery.
Usage Guidance
This skill is coherent with its stated purpose, but review and accept these facts before installing:
- Installation uses 'npm install' and will fetch the 'picnic-api' package (and transitive dependencies) from the public npm registry — verify you trust that package and version.
- You will need to provide your Picnic email/password (and 2FA if enabled). The CLI stores an authKey in ~/.config/picnic/config.json (file permission set to 600) — treat that file as sensitive.
- The login flow may print the authKey in JSON when 2FA is required; avoid sharing CLI output or logs that might contain that token.
- A debug helper (debug.mjs) is included and reads the same config/authKey; if you don't need it you can ignore or remove it.
If you trust the author and the 'picnic-api' package, the skill is reasonable to use. If you don't trust the source (owner unknown), verify the npm dependency and inspector-review the code before supplying real credentials.
Capability Analysis
Type: OpenClaw Skill
Name: picnic
Version: 1.0.0
The skill is designed to interact with the Picnic grocery service, allowing users to search products, manage their cart, and schedule deliveries. It handles sensitive data like login credentials (authKey) and user details, storing the authKey in `~/.config/picnic/config.json` with appropriate `0o600` permissions. All observed file and network access is directly related to the stated purpose of interacting with the Picnic API. There is no evidence of data exfiltration to unauthorized endpoints, malicious execution, persistence mechanisms, or prompt injection attempts in `SKILL.md`.
Capability Assessment
Purpose & Capability
Name/description match the actual code and SKILL.md. The CLI wraps the 'picnic-api' npm package to search products, manage cart, and check deliveries — these capabilities align with the stated purpose. Required artifacts (login, authKey storage) are expected for such a service.
Instruction Scope
SKILL.md tells the agent to run npm install and node picnic-cli.mjs commands and references only the Picnic-related config file (~/.config/picnic/config.json). This stays within the grocery-ordering scope. One privacy note: the login flow returns and saves an authKey and, in the 2FA path, the CLI outputs the authKey in JSON — that could leak credentials to logs if not handled carefully. A debug file (debug.mjs) is included and reads the same config and calls getDelivery with a hardcoded id; it appears benign but indicates the repo includes a debugging helper.
Install Mechanism
There is no platform install spec, but SKILL.md instructs the user to run 'npm install' which will fetch 'picnic-api' (and its dependencies) from the public npm registry. That is standard for Node projects but does entail pulling third-party code at install time (moderate risk compared with an instruction-only skill).
Credentials
The skill requests no environment variables and its only persistent data is a local config file containing an authKey and countryCode under ~/.config/picnic/config.json. Requesting user email/password for login is necessary for its function. There are no unrelated credentials requested.
Persistence & Privilege
The skill writes only to its own config path (~/.config/picnic/) and does not request always:true or modify other skills/system-wide settings. Creating and reading that config file is appropriate for a CLI that stores an auth token.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install picnic - After installation, invoke the skill by name or use
/picnic - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release - search products, manage cart, schedule delivery from Picnic supermarket
Metadata
Frequently Asked Questions
What is Picnic Grocery?
Order groceries from Picnic supermarket - search products, manage cart, schedule delivery. It is an AI Agent Skill for Claude Code / OpenClaw, with 1999 downloads so far.
How do I install Picnic Grocery?
Run "/install picnic" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Picnic Grocery free?
Yes, Picnic Grocery is completely free (open-source). You can download, install and use it at no cost.
Which platforms does Picnic Grocery support?
Picnic Grocery is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Picnic Grocery?
It is built and maintained by mpociot (@mpociot); the current version is v1.0.0.
More Skills