← 返回 Skills 市场
425
总下载
1
收藏
1
当前安装
1
版本数
在 OpenClaw 中安装
/install grocy-inventory
功能描述
Manage Grocy inventory, shopping list, batteries, and barcodes. Use when user wants to: (1) Check what's in their fridge/pantry, (2) See expiring products, (...
使用说明 (SKILL.md)
Grocy Inventory Skill
Check and manage your Grocy inventory, shopping list, and batteries. This skill connects to your local Grocy instance.
Configuration
| Variable | Value |
|---|---|
| URL | http://localhost:14611 |
| API Key | mz43yGJzBKfwZdSOwG5EdnKPRrKnCbkGrEFbxXYv2JF61tQ9Mj |
Quick Commands
Check Stock (Fridge/Pantry)
curl -s -H "GROCY-API-KEY: $API_KEY" "$URL/api/stock"
Lookup Details by Barcode
curl -s -H "GROCY-API-KEY: $API_KEY" "$URL/api/stock/products/by-barcode/{barcode}"
Consume Stock by Barcode
curl -s -X POST -H "GROCY-API-KEY: $API_KEY" \
-H "Content-Type: application/json" \
-d '{"amount": 1, "transaction_type": "consume"}' \
"$URL/api/stock/products/by-barcode/{barcode}/consume"
Mark Stock as Opened by Barcode
curl -s -X POST -H "GROCY-API-KEY: $API_KEY" \
-H "Content-Type: application/json" \
-d '{"amount": 1}' \
"$URL/api/stock/products/by-barcode/{barcode}/open"
Transfer Stock by Barcode
curl -s -X POST -H "GROCY-API-KEY: $API_KEY" \
-H "Content-Type: application/json" \
-d '{"amount": 1, "location_id_from": 6, "location_id_to": 2}' \
"$URL/api/stock/products/by-barcode/{barcode}/transfer"
Get All Batteries
curl -s -H "GROCY-API-KEY: $API_KEY" "$URL/api/batteries"
Track Battery Charge
curl -s -X POST -H "GROCY-API-KEY: $API_KEY" \
-H "Content-Type: application/json" \
-d '{"battery_id": 7}' \
"$URL/api/batteries/7/charge"
Common Tasks
| Task | Command |
|---|---|
| Find product by barcode | GET /api/stock/products/by-barcode/{barcode} |
| Consume by barcode | POST /api/stock/products/by-barcode/{barcode}/consume |
| Open by barcode | POST /api/stock/products/by-barcode/{barcode}/open |
| Transfer by barcode | POST /api/stock/products/by-barcode/{barcode}/transfer |
| Check battery status | GET /api/batteries |
| Track battery charge | POST /api/batteries/{id}/charge |
Tips
- Use
jqfor pretty JSON logs:curl ... | jq - For barcodes, use the direct
/by-barcode/{barcode}endpoints found in theStock "by-barcode"tags. - Full API docs: See
references/grocy-api.md
安全使用建议
This skill otherwise behaves like a normal Grocy client, but the SKILL.md embeds a plaintext API key and shows $API_KEY without declaring it as a required environment variable. Before installing or enabling: (1) Treat the API key in the docs as potentially sensitive — do not assume it's a harmless placeholder. If it's your Grocy key, rotate it. (2) Prefer the publisher to remove hardcoded keys from the skill and require the user to provide GROCY_URL and GROCY_API_KEY via environment variables or config. (3) Remember the skill's commands are state-changing (consume/add/transfer); if you allow autonomous invocations, the agent could modify your local inventory. (4) If you do not run Grocy on localhost:14611, there's no legitimate reason for the skill to access that URL. Ask the publisher to clarify whether the API key is a sample and to update instructions to not include secrets.
功能分析
Type: OpenClaw Skill
Name: grocy-inventory
Version: 1.0.0
The skill bundle contains a hardcoded API key in SKILL.md for a local Grocy instance (http://localhost:14611). While the logic and documentation in SKILL.md and references/grocy-api.md are consistent with the stated purpose of inventory management, hardcoding credentials is a significant security vulnerability. There is no evidence of intentional data exfiltration or malicious redirection to external domains.
能力评估
Purpose & Capability
Name/description align with the instructions: all commands target a local Grocy instance and perform expected inventory and battery operations. However, the skill includes a hardcoded API key in SKILL.md and references an $API_KEY variable despite the skill declaring no required env vars — this is inconsistent with the stated minimal configuration.
Instruction Scope
Instructions only call the local Grocy API (http://localhost:14611) and use curl for both read and state-changing operations (consume, add, transfer, charge). That's in-scope for an inventory skill, but the doc embeds a plaintext API key and uses an undefined $API_KEY variable. The presence of a concrete API key in the skill text is unexpected and could expose credentials if it is real. Also note: the skill's commands will modify local state (consume/transfer/add) when invoked.
Install Mechanism
No install spec and no code files — instruction-only skill. This minimizes disk footprint and reduces supply-chain risk.
Credentials
Registry metadata declares no required env vars or credentials, yet SKILL.md shows a specific API Key value and expects $API_KEY in examples. Requesting no secrets but shipping a concrete API key in the documentation is disproportionate and inconsistent. If that key is valid it grants full access to the local Grocy instance; if it's a leaked credential, it should be rotated.
Persistence & Privilege
always is false and the skill does not request persistent system-level privileges. It will act against localhost endpoints when invoked, which is normal for a local-service integration.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install grocy-inventory - 安装完成后，直接呼叫该 Skill 的名称或使用
/grocy-inventory触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
Initial release – manage your Grocy inventory and batteries with essential endpoints.
- Check fridge or pantry stock via the Grocy API.
- Find and manage products using barcodes (lookup, consume, open, transfer).
- View and track rechargeable battery status and charging.
- Example curl commands provided for all supported actions.
- Connects to a local Grocy instance at http://localhost:14611.
元数据
常见问题
Grocy Inventory 是什么？
Manage Grocy inventory, shopping list, batteries, and barcodes. Use when user wants to: (1) Check what's in their fridge/pantry, (2) See expiring products, (... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 425 次。
如何安装 Grocy Inventory？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install grocy-inventory」即可一键安装，无需额外配置。
Grocy Inventory 是免费的吗？
是的，Grocy Inventory 完全免费（开源免费），可自由下载、安装和使用。
Grocy Inventory 支持哪些平台？
Grocy Inventory 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Grocy Inventory？
由 septianw（@septianw）开发并维护，当前版本 v1.0.0。
推荐 Skills