Doordash Spend Guard

What it does

When your agent uses it

• The user wants budget limits on agent food ordering
• Asks how much have I spent on DoorDash
• Wants to set spending caps
• Whenever building carts / checking out with dd-cli while this skill is installed

Example prompts

• “how much have I spent on DoorDash”
• “/doordash-spend-guard”

Requirements

• A Bash shell
• Pre-approved tools (allowed-tools): Bash(dd-cli:*), Bash(bash .claude/skills/doordash-spend-guard/scripts/dd-guard.sh:*), Bash(command -v:*), Bash(mkdir:*), Bash(cat:*), Bash(jq:*), Read

Workflow steps

5 steps, taken from the first numbered list in SKILL.md.

1. 1Session start / before building a cart: report headroom —
2. 2Adding items: route through the wrapper —
3. 3Checkout: NEVER call dd-cli order checkout-url directly. Use
4. 4When blocked, do not negotiate with the wrapper. No editing
5. 5If the wrapper reports the cart subtotal as unparseable, it blocks by

What it can do on your machine

Read from SKILL.md and the folder at commit c0ca7da. It shows what the files ask for, not the result of running them.

• Tool permissions

  Pre-approves these tools, so the agent can use them without asking each time:

  • Bash(dd-cli:*)
  • Bash(bash .claude/skills/doordash-spend-guard/scripts/dd-guard.sh:*)
  • Bash(command -v:*)
  • Bash(mkdir:*)
  • Bash(cat:*)
  • Bash(jq:*)
  • Read

  From allowed-tools in the SKILL.md frontmatter.

• Runs code

  Ships 1 file in scripts/ (Shell), which the agent can run.

  Shell commands in SKILL.md call:

  • bash
  • jq

  From the folder's file list and the shell code blocks in SKILL.md.

• Network

  No URLs in SKILL.md.

  From URLs in SKILL.md, links to its own repository left out.

• Credentials

  Names no API keys, tokens, secrets or passwords.

  From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.

Context cost

Doordash Spend Guard loads about 1.3k tokens when it runs. Until then it costs about 187 tokens; SKILL.md has 483 words of instructions outside code blocks.

Always · name and description, kept in context so the agent knows when to use it

~187

When it runs · the whole SKILL.md, loaded when a task matches

~1.3k

Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.

Safety

Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); the scripts in this folder are not scanned.

SKILL.md

The full file from davila7/claude-code-templates at commit c0ca7da, republished under its MIT licence (© davila7). 483 words, ~1,292 tokens.

name

doordash-spend-guard

description

Hard spending policy for agent-driven DoorDash ordering through the DoorDash CLI (dd-cli). Per-order ceiling, daily/weekly/monthly caps, cooldown between orders, and blocked hours — enforced deterministically by routing every cart-mutation and checkout through the dd-guard wrapper script, which prices the cart, checks the policy against a persistent spend ledger, and refuses out-of-policy checkouts with exit code 2. Use when the user wants budget limits on agent food ordering, asks "how much have I spent on DoorDash", wants to set spending caps, or whenever building carts / checking out with dd-cli while this skill is installed. Pairs with a PreToolUse hook that denies raw dd-cli checkout calls that bypass the wrapper.

allowed-tools

Bash(dd-cli:*), Bash(bash .claude/skills/doordash-spend-guard/scripts/dd-guard.sh:*), Bash(command -v:*), Bash(mkdir:*), Bash(cat:*), Bash(jq:*), Read

tags

DoorDash, Budget, Spending Limits, Guardrails, CLI, Safety

{
  "per_order_max": 40,
  "daily_max": 60,
  "weekly_max": 150,
  "monthly_max": 400,
  "cooldown_minutes": 45,
  "allowed_hours": { "start": 7, "end": 23 }
}

bash .claude/skills/doordash-spend-guard/scripts/dd-guard.sh status
# or raw:
cat ~/.claude/dd-guard/ledger.jsonl | jq -s '[.[] | select(.status != "abandoned")] | map(.subtotal) | add'

© davila7, MIT. Rendered from Markdown: HTML in the file is shown as text, images as links, and headings moved down two levels. Raw file

Files

SKILL.md and 1 other file (scripts) in cli-tool/components/skills/doordash/doordash-spend-guard of davila7/claude-code-templates.

• SKILL.md
• scripts/dd-guard.sh

Open the folder on GitHubat commit c0ca7da