doordash-spend-guard

原文涵盖的主题

• DoorDash Spend Guard
• Honest scope
• Components in this bundle
• State (created on first run)
• Protocol (follow ALWAYS while this skill is installed)
• Reading the ledger

A budget stated in a prompt is advisory — the model can forget it mid-session and prompt injection can override it. This skill makes the budget deterministic: every checkout and cart mutation goes through one audited wrapper (dd-guard.sh) that prices the cart, checks the policy, and refuses out-of-policy actions with a machine exit code. The companion PreToolUse hook (doordash-spend-guard hook component) denies raw dd-cli order checkout-url / dd-cli cart add-items calls that try to bypass the wrapper. Unofficial community skill built on DoorDash's doordash-oss/doordash-cli. Requires dd-cli installed and logged in. Wrapper needs python3. Caps apply to the pre-fee subtotal that cart show exposes; fees, tip and tax land on the DoorDash payment page. Documented headroom, not loopholes. The ledger records intent when a checkout URL is issued; the human may abandon the page. /doordash-budget reconciles intents against dd-cli order history, marking entries paid or abandoned. Enforcement teeth come from the hook + wrapper combo. Install both; the skill alone is guidance. | Piece | Role | |---|---| | this skill | protocol: always route through dd-guard, report headroom | | scripts/dd-guard.

这里只展示节选，请以完整原文和当前要求为准。