Paprika

Access recipes, meal plans, and grocery lists from Paprika Recipe Manager. Use when user asks about recipes, meal planning, or cooking.

This skill's instructions require installing an external npm package ('paprika-recipe-cli') and providing Paprika credentials, but the skill metadata doesn't declare the required binary or env vars — that's an inconsistency you should address before installing. Before proceeding: 1) Verify the npm package and its publisher on npmjs.com and GitHub to ensure it's legitimate (watch for typosquatting). 2) Prefer using the CLI's interactive auth rather than exporting plaintext password environment variables; if you must use env vars, understand where/if credentials are stored and how secure that storage is. 3) Ask the skill author to update the skill metadata to declare required binaries (paprika) and any required env vars and to provide an install spec with provenance. 4) If you don't trust the package owner, do not install the global npm package or provide your Paprika credentials. If you need help verifying the npm package or inspecting what the 'paprika' CLI does, gather the package link (npm or GitHub) and request a security review.

Type: OpenClaw Skill Name: paprika Version: 0.1.0 The skill bundle defines a benign OpenClaw skill for interacting with Paprika Recipe Manager. The `SKILL.md` provides clear instructions for installation (`npm install -g paprika-recipe-cli`) and setup (setting `PAPRIKA_EMAIL` and `PAPRIKA_PASSWORD` environment variables), which are standard practices for CLI tools. All commands the agent is instructed to use are direct invocations of the `paprika` CLI tool, aligned with the stated purpose of accessing recipes, meal plans, and grocery lists. There is no evidence of data exfiltration, malicious execution, persistence mechanisms, prompt injection attempts against the agent, or obfuscation within the provided files. While `npm install` introduces a supply chain risk, the instruction itself is not malicious, and the agent's operational commands are limited to the `paprika` binary.