Doordash Group Checkout Gate
Live allergen re-check for DoorDash CLI group orders. When a checkout runs for a cart that has a doordash-group-orders round ledger (.dd/round-*.json), this hook itself runs 'dd-cli cart show', joins cart lines to eaters via the person-to-cart-item-id ledger, and re-derives allergen conflicts against each eater's entry in the team-food.json roster - blocking with exit 2 on a live anaphylaxis-tier match. Verifies reality at checkout time instead of trusting a flag file: a skipped vetting step or a cart edited after review cannot pass silently. Only activates for carts with a round ledger; solo orders are doordash-allergy-shield territory.
npx claude-code-templates@latest --hook doordash/doordash-group-checkout-gate Scanned by NVIDIA SkillSpector
Automated static analysis (no LLM) · v2.12.0 · 2026-10-17
SkillSpector looks for patterns such as shell commands, credential access, network calls or unpinned dependencies. An observation is something worth reading in the files before you install, not a confirmed vulnerability. Components that run code locally, like hooks, MCP servers and security tooling, naturally show more of them.
- Skill declares no tool scope ('permissions' or 'allowed-tools') but code capabilities were detected: env, file_read, shell.MCP Least Privilege · SKILL.md:1
Learn more about NVIDIA SkillSpector.