Picnic Grocery

Order groceries from Picnic supermarket - search products, manage cart, schedule delivery.

This skill is coherent with its stated purpose, but review and accept these facts before installing: - Installation uses 'npm install' and will fetch the 'picnic-api' package (and transitive dependencies) from the public npm registry — verify you trust that package and version. - You will need to provide your Picnic email/password (and 2FA if enabled). The CLI stores an authKey in ~/.config/picnic/config.json (file permission set to 600) — treat that file as sensitive. - The login flow may print the authKey in JSON when 2FA is required; avoid sharing CLI output or logs that might contain that token. - A debug helper (debug.mjs) is included and reads the same config/authKey; if you don't need it you can ignore or remove it. If you trust the author and the 'picnic-api' package, the skill is reasonable to use. If you don't trust the source (owner unknown), verify the npm dependency and inspector-review the code before supplying real credentials.

Type: OpenClaw Skill Name: picnic Version: 1.0.0 The skill is designed to interact with the Picnic grocery service, allowing users to search products, manage their cart, and schedule deliveries. It handles sensitive data like login credentials (authKey) and user details, storing the authKey in `~/.config/picnic/config.json` with appropriate `0o600` permissions. All observed file and network access is directly related to the stated purpose of interacting with the Picnic API. There is no evidence of data exfiltration to unauthorized endpoints, malicious execution, persistence mechanisms, or prompt injection attempts in `SKILL.md`.