doordash-spend-guard
doordash-spend-guard is an Agent security & guardrails skill for AI agents, published by davila7 in the claude-code-templates repository on GitHub. Skillspace rates doordash-spend-guard C (70/100) and it passed the safety scan; a judge model has also reviewed it.
Hard spending policy for agent-driven DoorDash ordering through the DoorDash CLI (dd-cli). Per-order ceiling, daily/weekly/monthly caps, cooldown between orders, and blocked hours — enforced deterministically by routing every cart-mutation and checkout through the dd-guard wrapper script, which prices the cart, checks the policy against a persistent spend ledger, and refuses out-of-policy checkouts with exit code 2. Use when the user wants budget limits on agent food ordering, asks "how much have I spent on DoorDash", wants to set spending caps, or whenever building carts / checking out with dd-cli while this skill is installed. Pairs with a PreToolUse hook that denies raw dd-cli checkout calls that bypass the wrapper.
- Grade
- C
- Quality
- 70 / 100
- Safety
- Passed
- GitHub stars
- 29,554
Placed #2 of 6 in the judged category final for Agent security & guardrails.
Our two independent classifiers differ on this skill's category, so treat the placement as provisional.
This rating describes the version of the repository we crawled; it may have changed since, so go by its current files.
Our review
- Architecture
- 100 / 100
- Maturity
- Structured: ships references or scripts
- Security scan
- Low-risk patterns
- License
- MIT
- Adoption
- Adopted by 0 other repositories, in 2 collections
- Scope
- Vendor-specific: built around one product. Spend policy for ordering via the public DoorDash CLI.
Judge review
Placed #2 of 6 in the judged category final for Agent security & guardrails.
- Trigger
88 88 - Instructions
92 92 - Specificity
92 92 - Safety
94 94 - Disclosure
78 78 - Maintenance
85 85
Correctly treats a prompt-stated budget as unenforceable and routes every mutation through a deterministic wrapper plus a hook that blocks raw bypass calls, with explicit anti-gaming rules against order-splitting.
What the scanner flagged
- over-broad allowed-tools ('*')
Not checked yet
- No blind task eval yet
- Sibling files (scripts, references) not fetched; security scan covers SKILL.md only
Skillspace indexes and rates this skill; it does not host or endorse it. Run third-party skills at your own risk.