Skip to main content

pp-allrecipes

Provides access to Allrecipes data via terminal commands for efficient meal planning and grocery list creation.

Install this skill

or
84/100

Security score

The pp-allrecipes skill was audited on Jun 6, 2026 and we found 4 security issues across 3 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 277

Webhook reference - potential data exfiltration

SourceSKILL.md
277| `webhook:<url>` | POST the output body to the URL (`application/json` or `application/x-ndjson` when `--compact`) |
medium line 279

Webhook reference - potential data exfiltration

SourceSKILL.md
279Unknown schemes are refused with a structured error naming the supported set. Webhook failures return non-zero and log the URL + HTTP status on stderr.
medium line 265

Access to hidden dotfiles in home directory

SourceSKILL.md
265Entries are stored locally at `~/.allrecipes-pp-cli/feedback.jsonl`. They are never POSTed unless `ALLRECIPES_FEEDBACK_ENDPOINT` is set AND either `--send` is passed or `ALLRECIPES_FEEDBACK_AUTO_SEND=
low line 109

External URL reference

SourceSKILL.md
109allrecipes-pp-cli grocery-list https://www.allrecipes.com/recipe/9599/quick-and-easy-brownies/ https://www.allrecipes.com/recipe/16354/easy-meatloaf/ --agent
Scanned on Jun 6, 2026
View Security Dashboard
Installation guide →