Skip to content
← Registry
Trust Report

zepto

Order groceries from Zepto in seconds. Just say what you need, get a payment link on WhatsApp, pay on your phone, done. Remembers your usual items. Works across India where Zepto delivers.

84
CONDITIONAL
Format: openclawScanner: v0.8.0Duration: 80msScanned: 1d ago · May 9, 8:21 PMSource →
Embed this badge
AgentVerus CONDITIONAL 84AgentVerus CONDITIONAL 84AgentVerus CONDITIONAL 84
[![AgentVerus](https://agentverus.ai/api/v1/skill/6644041c-3bb1-466f-bc22-46ccb2aa0096/badge)](https://agentverus.ai/skill/6644041c-3bb1-466f-bc22-46ccb2aa0096)
Community Discussion

Community Comments

Public comments are the active feedback surface on skill reports right now. Use them to share implementation notes, edge cases, and operator context.

0 comments

Sign in to comment on this skill

No comments yet. Be the first to share your thoughts.

Continue the workflow

Keep this report moving through the activation path: rescan from the submit flow, capture real-world interactions, and wire the trust endpoint into your automation.

https://agentverus.ai/api/v1/skill/6644041c-3bb1-466f-bc22-46ccb2aa0096/trust
Personalized next commands

Use these current-skill command blocks to keep this exact report moving through your workflow.

Record an interaction
curl -X POST https://agentverus.ai/api/v1/interactions \
  -H "Authorization: Bearer at_your_api_key" \
  -H "Content-Type: application/json" \
  -d '{"agentPlatform":"openclaw","skillId":"6644041c-3bb1-466f-bc22-46ccb2aa0096","interactedAt":"2026-03-15T12:00:00Z","outcome":"success"}'
Fetch trust JSON
curl https://agentverus.ai/api/v1/skill/6644041c-3bb1-466f-bc22-46ccb2aa0096/trust

Category Scores

62
Permissions
100
Injection
77
Dependencies
83
Behavioral
80
Content
100
Code Safety

Findings (19)

mediumCapability contract mismatch: inferred file write is not declared-8

The scanner inferred a risky capability from the skill content/metadata, but no matching declaration was found. Add a declaration with a clear justification, or remove the behavior.

Content pattern: Stores order history locally in `~/.openclaw/skills/zepto/order-history.json` (local file

Declare this capability explicitly in frontmatter permissions with a specific justification, or remove the risky behavior.

permissionsASST-03
mediumCapability contract mismatch: inferred network access is not declared-6

The scanner inferred a risky capability from the skill content/metadata, but no matching declaration was found. Add a declaration with a clear justification, or remove the behavior.

Content pattern: https://www.zepto.com/account

Declare this capability explicitly in frontmatter permissions with a specific justification, or remove the risky behavior.

permissionsASST-04
mediumCapability contract mismatch: inferred browser automation is not declared-8

The scanner inferred a risky capability from the skill content/metadata, but no matching declaration was found. Add a declaration with a clear justification, or remove the behavior.

Content pattern: Browser automation

Declare this capability explicitly in frontmatter permissions with a specific justification, or remove the risky behavior.

permissionsASST-03
mediumCapability contract mismatch: inferred content extraction is not declared-8

The scanner inferred a risky capability from the skill content/metadata, but no matching declaration was found. Add a declaration with a clear justification, or remove the behavior.

Content pattern: Screenshot

Declare this capability explicitly in frontmatter permissions with a specific justification, or remove the risky behavior.

permissionsASST-02
mediumCapability contract mismatch: inferred payment processing is not declared-8

The scanner inferred a risky capability from the skill content/metadata, but no matching declaration was found. Add a declaration with a clear justification, or remove the behavior.

Content pattern: payments

Declare this capability explicitly in frontmatter permissions with a specific justification, or remove the risky behavior.

permissionsASST-03
mediumAutonomous action without confirmation detected-10

Found autonomous action without confirmation pattern: "without asking"

**Automatically clear cart without asking (user expects cart to be empty after payment):**

Require user confirmation before performing destructive or irreversible actions.

behavioralASST-09
mediumMany external URLs referenced (7)-8

The skill references 7 external URLs and also discusses auth/API/payment workflows, which increases the chance that sensitive operations depend on many remote endpoints.

URLs: https://www.zepto.com/account, https://www.zepto.com, https://www.zepto.com/pn/munchies, https://www.zepto.com/search?query={item}, https://www.zepto.com/?cart=open...

Minimize external dependencies to reduce supply chain risk.

dependenciesASST-04
mediumBrowser content extraction detected (inside code block)-5

Found browser content extraction pattern: "Take screenshot"

# Take screenshot to show user the options

Treat browser page capture and HTML/text extraction as potential data-access operations, especially when sessions may be authenticated. Make the data-access scope explicit and avoid collecting more page content than needed.

behavioralASST-02
lowUnknown external reference-5

The skill references an unknown external domain which is classified as low risk.

https://www.zepto.com/account

Verify that this external dependency is trustworthy and necessary.

dependenciesASST-04
lowUnknown external reference-5

The skill references an unknown external domain which is classified as low risk.

https://www.zepto.com

Verify that this external dependency is trustworthy and necessary.

dependenciesASST-04
lowUnknown external reference-5

The skill references an unknown external domain which is classified as low risk.

https://www.zepto.com/pn/munchies

Verify that this external dependency is trustworthy and necessary.

dependenciesASST-04
lowUnknown external reference

The skill references an unknown external domain which is classified as low risk.

https://www.zepto.com/search?query={item}

Verify that this external dependency is trustworthy and necessary.

dependenciesASST-04
lowUnknown external reference

The skill references an unknown external domain which is classified as low risk.

https://www.zepto.com/?cart=open

Verify that this external dependency is trustworthy and necessary.

dependenciesASST-04
lowUnknown external reference

The skill references an unknown external domain which is classified as low risk.

https://payments.juspay.in/payment-page/signature/zeptomarketplace-{order_id}

Verify that this external dependency is trustworthy and necessary.

dependenciesASST-04
lowUnknown external reference

The skill references an unknown external domain which is classified as low risk.

https://payments.juspay.in/payment-page/signature/zeptomarketplace-{ORDER_ID_EXAMPLE}

Verify that this external dependency is trustworthy and necessary.

dependenciesASST-04
lowNo explicit safety boundaries-10

The skill does not include explicit safety boundaries defining what it should NOT do.

No safety boundary patterns found

Add a 'Safety Boundaries' section listing what the skill must NOT do (e.g., no file deletion, no network access beyond needed APIs).

contentASST-09
infoState persistence detected (inside code block)-2

Found state persistence pattern: "Write to file"

# Step 6: Write to file

If state persistence is needed, document what data is stored and where. Allow users to review stored data.

behavioralASST-09
infoOutput constraints defined

The skill includes output format constraints (length limits, format specifications).

Output constraint patterns detected

Keep these output constraints.

contentASST-09
infoError handling instructions present

The skill includes error handling instructions for graceful failure.

Error handling patterns detected

Keep these error handling instructions.

contentASST-09