rohlik-mcp: why it is not safe to use
Review warning: the skill needs your Rohlik username and password and can access sensitive account, order, delivery, and cart data.
What we found
Our review did not find hidden prompts, hardcoded secrets, obfuscated code, undisclosed third-party destinations, or remote code download behavior in the inspected repository. The network activity we saw was consistent with the stated grocery-shopping purpose, and the code appears limited to account, cart, order, and delivery-slot actions against Rohlik Group endpoints.
The reason this skill did not fully pass is narrower: it requires your Rohlik account username and password, stores those credentials in local MCP configuration or environment variables, and can access inherently sensitive account material such as cart contents, order history, delivery details, and account data. We also saw cart modification actions like adding or removing items. We did not see order submission in the inspected code, and the vendor states checkout is completed by the customer in the e-shop.
What to do instead
Use this skill only if you are comfortable providing your grocery account credentials to a local MCP setup and granting access to shopping and account data. Prefer a separate account if available, keep environment variables and config files well protected, and avoid using it on shared machines. If you only need product browsing, choose an option that does not require account login.
Source: https://github.com/tomaspavlin/rohlik-mcp
We report what our security review found at the time we checked, with the goal of keeping people safe. Projects change; if a maintainer has since fixed this, we are glad to recheck it. Email hello@agentpod.com.