← 返回 Skills 市场
1100
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install tandoor-recipes
功能描述
Manage recipes, meal plans, and shopping lists in Tandoor Recipe Manager. Use when the user wants to create recipes, plan meals, search for recipes, or manage their shopping list.
安全使用建议
This skill largely does what it claims — it issues API calls to your Tandoor instance using TANDOOR_URL and TANDOOR_API_TOKEN. Before installing: (1) Be aware the package expects Node modules (e.g., zod) but no install step is provided; you should run npm install in a safe environment or verify bundled JS runs without external dependencies. (2) The code reads an undocumented TANDOOR_ADDITIONAL_HEADERS env var (JSON) which, if set, will be merged into requests — only set it if you trust the skill and know why extra headers are needed. (3) Review the included scripts (tandoor.js and api.js) yourself or run the skill in an isolated environment/network to confirm behavior. (4) Prefer giving the TANDOOR_API_TOKEN least privilege and rotate/revoke it if you stop using the skill. These inconsistencies look like oversights rather than malice, but they warrant caution.
功能分析
Type: OpenClaw Skill
Name: tandoor-recipes
Version: 1.0.0
The skill is designed to interact with a Tandoor Recipe Manager API, requiring `TANDOOR_URL` and `TANDOOR_API_TOKEN` environment variables for authentication. All API calls in `scripts/tandoor.js` are made to the configured Tandoor instance using `fetch` via `scripts/api.js`, with user inputs being properly encoded or parsed. The `SKILL.md` provides clear, benign instructions for the AI agent, and there is no evidence of prompt injection, data exfiltration, malicious execution, persistence, or obfuscation across any of the files.
能力评估
Purpose & Capability
Name/description match the code: the scripts call Tandoor API endpoints and implement recipe, meal-plan, and shopping-list operations. Required binary (node) and required env vars (TANDOOR_URL, TANDOOR_API_TOKEN) are appropriate. Minor mismatch: package.json declares a runtime dependency on 'zod' but the SKILL.md/registry did not include an install step to ensure Node packages are present.
Instruction Scope
SKILL.md instructs the agent to run node ./scripts/tandoor.js and documents TANDOOR_URL and TANDOOR_API_TOKEN only. The actual code also reads an undocumented environment variable TANDOOR_ADDITIONAL_HEADERS (JSON) and will merge that into outgoing headers. The instructions do not mention this env var or validate its use; that is an unexpected surface the agent could use.
Install Mechanism
There is no install spec (instruction-only), which is low risk, but the package includes JS source that imports 'zod' and package.json lists dependencies. Without an install step the runtime may fail (missing node modules). No downloads or remote installs are performed by the skill itself.
Credentials
Declared env vars (TANDOOR_URL, TANDOOR_API_TOKEN) are proportional to the stated purpose. However, code accepts an extra environment variable (TANDOOR_ADDITIONAL_HEADERS) not declared as required; while it is optional and only applied to requests to the configured TANDOOR_URL, it is an undocumented way to influence outgoing headers.
Persistence & Privilege
The skill does not request always:true, does not modify other skills, and does not ask to persist credentials beyond using the provided environment variables. It runs as a one-off CLI tool invoked by the agent.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install tandoor-recipes - 安装完成后，直接呼叫该 Skill 的名称或使用
/tandoor-recipes触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
Initial release of tandoor-recipes skill.
- Manage recipes, meal plans, and shopping lists in Tandoor Recipe Manager via command-line scripts.
- Search, create, retrieve, and schedule recipes.
- View and modify meal plans for specific dates.
- Add, check off, and remove shopping list items.
- Browse available foods, meal types, units, and keywords for reference.
- Includes example workflows for common tasks and troubleshooting tips.
元数据
常见问题
Tandoor Recipe 是什么？
Manage recipes, meal plans, and shopping lists in Tandoor Recipe Manager. Use when the user wants to create recipes, plan meals, search for recipes, or manage their shopping list. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 1100 次。
如何安装 Tandoor Recipe？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install tandoor-recipes」即可一键安装，无需额外配置。
Tandoor Recipe 是免费的吗？
是的，Tandoor Recipe 完全免费（开源免费），可自由下载、安装和使用。
Tandoor Recipe 支持哪些平台？
Tandoor Recipe 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Tandoor Recipe？
由 itsnikhil（@itsnikhil）开发并维护，当前版本 v1.0.0。
推荐 Skills