Agent skill · operations · davila7
doordash-spend-guard
Hard spending policy for agent-driven DoorDash ordering through the DoorDash CLI (dd-cli). Per-order ceiling, daily/weekly/monthly caps, cooldown between orders, and blocked hours — enforced deterministically by routing every cart-mutation and checkout through the dd-guard wrapper script, which prices the cart, checks the policy against a persistent spend ledger, and refuses out-of-policy checkouts with exit code 2. Use when the user wants budget limits on agent food ordering, asks "how much have I spent on DoorDash", wants to set spending caps, or whenever building carts / checking out with dd-cli while this skill is installed. Pairs with a PreToolUse hook that denies raw dd-cli checkout calls that bypass the wrapper.
Why this skill is useful
Adds a wrapper script that enforces deterministic spending limits on DoorDash orders, which the AI cannot generate from existing knowledge.
What it needs
Requires dd-cli, python3 installed locally. Requires doordash account access. About 3k tokens when loaded. Last updated 2026-08-06. 30,138 stars on the source repository.
What this skill does
DoorDash Spend Guard A budget stated in a prompt is advisory — the model can forget it mid-session and prompt injection can override it. This skill makes the budget deterministic: every checkout and cart mutation goes through one audited wrapper (dd-guard.sh) that prices the cart, checks the policy, and refuses out-of-policy actions with a machine exit code. The companion PreToolUse hook (doordash-spend-guard hook component) denies raw dd-cli order checkout-url / dd-cli cart add-items calls that try to bypass the wrapper. Unofficial community skill built on DoorDash's doordash-oss/doordash-cli. Requires dd-cli installed and logged in. Wrapper needs python3. Honest scope Caps apply to the pre-fee subtotal that cart show exposes; fees, tip and tax land on the DoorDash payment page. Documented headroom, not loopholes. The ledger records intent when a checkout URL is issued; the human may abandon the page. /doordash-budget reconciles intents against dd-cli order history, marking entries paid or abandoned. Enforcement teeth come from the hook + wrapper combo. Install both; the skill alone is guidance. Components in this bundle Piece Role --- --- this skill protocol: always route through dd-guard, report headroom scripts/dd-guard.sh → installs to .claude/skills/doordash-spend-guard/scripts/dd-guard.sh the deterministic gate hook doordash/doordash-spend-guard denies bypasses of the wrapper command /doordash-budget view/edit policy, reconcile ledger State (created on first run) ~/.claude/dd-guard/limits.json — policy. Human-edited only. Never edit this file yourself; when the user asks for a change, direct them to /doordash-budget which confirms interactively. ~/.claude/dd-guard/ledger.jsonl — one line per priced action: {"ts": "...", "cartuuid": "...", "subtotal": 24.5, "status": "intent"} (status becomes paid / abandoned after reconciliation). Protocol (follow ALWAYS while this skill is installed) 1. …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills davila7/doordash-spend-guard