Doordash Audit Log
Append-only audit log of every DoorDash CLI (dd-cli) invocation made through Claude Code. A PostToolUse hook records one versioned JSON line per dd-cli command (timestamp, session, cwd, command with tokens stripped, event type derived from the command itself - search / cart_mutation / checkout_url / history - plus cart/order uuids when extractable) to ~/.claude/dd-guard/audit.jsonl. Answers 'what has my AI been ordering and what did it cost' with data instead of memory. Self-contained: captures checkout and mutation events from the command text itself, no dependency on other dd-cli hooks. Pair with the /doordash-report command for reconciled spend summaries.
npx claude-code-templates@latest --hook doordash/doordash-audit-log Scanned by NVIDIA SkillSpector
Automated static analysis (no LLM) · v2.12.0 · 2026-10-17
SkillSpector looks for patterns such as shell commands, credential access, network calls or unpinned dependencies. An observation is something worth reading in the files before you install, not a confirmed vulnerability. Components that run code locally, like hooks, MCP servers and security tooling, naturally show more of them.
- Skill declares no tool scope ('permissions' or 'allowed-tools') but code capabilities were detected: env, file_write.MCP Least Privilege · SKILL.md:1
Learn more about NVIDIA SkillSpector.