Doordash Allergy Checkout Gate
Deterministic allergy tripwire for DoorDash CLI (dd-cli) checkouts. Before any 'dd-cli order checkout-url' (direct or via the dd-guard wrapper) it verifies that a fresh vetted-cart dump exists for that cart (written by the doordash-allergy-shield skill after vetting) and independently re-greps the dump against the anaphylaxis-severity allergens in the user's dietary profile plus their hidden-source synonyms (satay->peanut, aioli->egg, ponzu->soy/fish). Blocks with exit 2 when the dump is missing, stale (older than the last cart mutation), or contains a match. Also timestamps cart mutations so staleness is verifiable. A tripwire against agent mistakes, not medical-grade protection.
npx claude-code-templates@latest --hook doordash/doordash-allergy-checkout-gate Scanned by NVIDIA SkillSpector
Automated static analysis (no LLM) · v2.12.0 · 2026-10-17
SkillSpector looks for patterns such as shell commands, credential access, network calls or unpinned dependencies. An observation is something worth reading in the files before you install, not a confirmed vulnerability. Components that run code locally, like hooks, MCP servers and security tooling, naturally show more of them.
- Skill declares no tool scope ('permissions' or 'allowed-tools') but code capabilities were detected: env.MCP Least Privilege · SKILL.md:1
Learn more about NVIDIA SkillSpector.