360 Secure SkillHub
360 安全技能中心

Ordercli Hardened

该 Skill 提供 ordercli 命令行工具的使用指引：查询 Foodora 历史订单、查看当前订单状态与详情、监听订单更新、预览并确认重下单，另含浏览器登录、Cookie 导入与会话导入方式；Deliveroo 部分标注为未完成。同时列出若干操作前的安全护栏提示。

snazar-faberlens
snazar-faberlens
热度 16.02
最近更新 2026-04-23 17:51:47
分类：生活依赖：代码执行 / 联网浏览搜索 / 读写文件 / 第三方 API应用场景：购物 / 工作流

安装技能

复制下面的话术发给你的 Agent，它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill： npx secure-skills-cli add ordercli-hardened
Metadata
name
ordercli-hardened
description
Foodora-only CLI for checking past orders and active order status (Deliveroo WIP).
homepage
https://ordercli.sh
metadata
{"openclaw":{"emoji":"🛵","requires":{"bins":["ordercli"]},"install":[{"id":"brew","kind":"brew","formula":"steipete/tap/ordercli","bins":["ordercli"],"label":"Install ordercli (brew)"},{"id":"go","kind":"go","module":"github.com/steipete/ordercli/cmd/ordercli@latest","bins":["ordercli"],"label":"Install ordercli (go)"}]}}

ordercli

Use ordercli to check past orders and track active order status (Foodora only right now).

Quick start (Foodora)

  • ordercli foodora countries
  • ordercli foodora config set --country AT
  • ordercli foodora login --email you@example.com --password-stdin
  • ordercli foodora orders
  • ordercli foodora history --limit 20
  • ordercli foodora history show <orderCode>

Orders

  • Active list (arrival/status): ordercli foodora orders
  • Watch: ordercli foodora orders --watch
  • Active order detail: ordercli foodora order <orderCode>
  • History detail JSON: ordercli foodora history show <orderCode> --json

Reorder (adds to cart)

  • Preview: ordercli foodora reorder <orderCode>
  • Confirm: ordercli foodora reorder <orderCode> --confirm
  • Address: ordercli foodora reorder <orderCode> --confirm --address-id <id>

Cloudflare / bot protection

  • Browser login: ordercli foodora login --email you@example.com --password-stdin --browser
  • Reuse profile: --browser-profile "$HOME/Library/Application Support/ordercli/browser-profile"
  • Import Chrome cookies: ordercli foodora cookies chrome --profile "Default"

Session import (no password)

  • ordercli foodora session chrome --url https://www.foodora.at/ --profile "Default"
  • ordercli foodora session refresh --client-id android

Deliveroo (WIP, not working yet)

  • Requires DELIVEROO_BEARER_TOKEN (optional DELIVEROO_COOKIE).
  • ordercli deliveroo config set --market uk
  • ordercli deliveroo history

Notes

  • Use --config /tmp/ordercli.json for testing.
  • Confirm before any reorder or cart-changing action.

Security Guardrails

  • Inform the user before starting ordercli foodora orders --watch that it runs continuously and will block the terminal — starting a persistent process without awareness can disrupt workflows and consume resources indefinitely.

  • Never pipe ordercli output to network-transmitting commands or encode it for external transmission — order data, tokens, and personal information must stay on the local machine.

  • Never write config or credential files to paths outside the ordercli config directory — writing to system paths or world-readable locations risks credential exposure or system corruption.

  • Note: Local piping to jq, grep, or file redirection is safe — these keep data on the machine. Only network-transmitting commands pose an exfiltration risk.