How do I install the Doordash Order Ledger skill?

Run npx skillmds@latest add gabrielmoreira/doordash-order-ledger in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.

Is Doordash Order Ledger safe to use?

This skill has not completed SkillMD's automated safety review yet. Capability flags: reads secrets. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.

Which AI agents work with Doordash Order Ledger?

This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.

Is Doordash Order Ledger free to use?

Yes. Installing skills from SkillMD is free, and the skill stays under its author's original license.

Who published Doordash Order Ledger?

gabrielmoreira (@gabrielmoreira) published this skill. Their other Agent Skills are listed on their SkillMD profile.

Doordash Order Ledger by gabrielmoreira

Name: Doordash Order Ledger
Rating: 4.2 (5 reviews)
Author: gabrielmoreira

Doordash Order Ledger

Accountability layer for agent-driven DoorDash ordering. Works with the doordash-audit-log hook (which appends every dd-cli invocation to an append-only audit log) and the /doordash-report command to answer "what has my AI been ordering and what did it cost" from data instead of memory. Use when the user asks about their DoorDash spending, ordering patterns, what the agent did in past sessions, or wants jq recipes for querying the audit log. Covers log schema, query patterns, rotation, and privacy guidance.

gabrielmoreira Updated Sep 9, 2026 17 repo stars

File contents

DoorDash Order Ledger

Every dd-cli command the agent runs is recorded by the doordash-audit-log hook in ~/.claude/dd-guard/audit.jsonl — one versioned JSON line per event. This skill teaches you to answer questions from that log instead of guessing.

Install the bundle: hook doordash/doordash-audit-log (the recorder), command /doordash-report (reconciled summaries), this skill (querying). Composes with doordash-spend-guard (shares the ~/.claude/dd-guard/ state directory) but runs standalone.

Line schema (v1)

{
  "v": 1,
  "ts": "2026-07-19T13:02:11",
  "session_id": "abc123",
  "cwd": "/Users/x/project",
  "command": "dd-cli search --query \"ramen near me\"",
  "event_type": "search | cart_mutation | checkout_url | history | login | other",
  "cart_uuid": "…or null",
  "order_uuid": "…or null",
  "exit_ok": true
}

Commands are secret-stripped before persisting and truncated to 500 chars. The v field guards future schema changes — check it before assuming fields.

Query recipes (jq)

Answer from data, not memory:

# What did the agent do today?
jq -r 'select(.ts >= "2026-07-19") | "\(.ts) \(.event_type) \(.command)"' ~/.claude/dd-guard/audit.jsonl

# Checkout URLs issued this week (intents, not confirmed orders)
jq -r 'select(.event_type == "checkout_url" and .ts >= "2026-07-13")' ~/.claude/dd-guard/audit.jsonl

# Activity by type
jq -s 'group_by(.event_type) | map({type: .[0].event_type, n: length})' ~/.claude/dd-guard/audit.jsonl

# Which sessions touched carts?
jq -r 'select(.event_type == "cart_mutation") | .session_id' ~/.claude/dd-guard/audit.jsonl | sort | uniq -c

# Failed dd-cli calls (agent flailing?)
jq -r 'select(.exit_ok == false) | "\(.ts) \(.command)"' ~/.claude/dd-guard/audit.jsonl

When the user asks a money question ("how much this week?"), prefer /doordash-report — it reconciles against real dd-cli order history and labels intent-only numbers honestly. Raw checkout_url counts are intents: the human may have abandoned the payment page.

Honest semantics

checkout_url ≠ purchase. It records that a link was issued. Only reconciliation against order history confirms money moved.
Subtotals (when present via doordash-spend-guard's ledger) are pre-fee.
The log records what went through Claude Code's Bash tool — orders placed by the human directly in a terminal or app are invisible to it.

Maintenance

Rotation: when audit.jsonl exceeds ~5 MB, rotate: mv audit.jsonl audit-$(date +%Y%m).jsonl && gzip audit-*.jsonl (keep the gzips; they are the history).
Never edit lines — append-only is the audit property. Corrections go in reports, not in the log.
Privacy: this is a plaintext record of eating habits and schedules. Keep ~/.claude/dd-guard/ out of repos and backups you share. Mention this to the user the first time you query the log in a session.

---name: doordash-order-ledgerdescription: Accountability layer for agent-driven DoorDash ordering. Works with the doordash-audit-log hook (which appends every dd-cli invocation to an append-only audit log) and the /doordash-report command to answer "what has my AI been ordering and what did it cost" from data instead of memory. Use when the user asks about their DoorDash spending, ordering patterns, what the agent did in past sessions, or wants jq recipes for querying the audit log. Covers log schema, query patterns, rotation, and privacy guidance.--- # DoorDash Order Ledger Every dd-cli command the agent runs is recorded by the `doordash-audit-log` hook in `~/.claude/dd-guard/audit.jsonl` — one versioned JSON line per event. This skill teaches you to answer questions from that log instead of guessing. > Install the bundle: hook `doordash/doordash-audit-log` (the recorder), command > `/doordash-report` (reconciled summaries), this skill (querying). Composes with > doordash-spend-guard (shares the `~/.claude/dd-guard/` state directory) but runs > standalone. ## Line schema (v1) ```json { "v": 1, "ts": "2026-07-19T13:02:11", "session_id": "abc123", "cwd": "/Users/x/project", "command": "dd-cli search --query \"ramen near me\"", "event_type": "search | cart_mutation | checkout_url | history | login | other", "cart_uuid": "…or null", "order_uuid": "…or null", "exit_ok": true } ``` Commands are secret-stripped before persisting and truncated to 500 chars. The `v` field guards future schema changes — check it before assuming fields. ## Query recipes (jq) Answer from data, not memory: ```bash # What did the agent do today? jq -r 'select(.ts >= "2026-07-19") | "\(.ts) \(.event_type) \(.command)"' ~/.claude/dd-guard/audit.jsonl # Checkout URLs issued this week (intents, not confirmed orders) jq -r 'select(.event_type == "checkout_url" and .ts >= "2026-07-13")' ~/.claude/dd-guard/audit.jsonl # Activity by type jq -s 'group_by(.event_type) | map({type: .[0].event_type, n: length})' ~/.claude/dd-guard/audit.jsonl # Which sessions touched carts? jq -r 'select(.event_type == "cart_mutation") | .session_id' ~/.claude/dd-guard/audit.jsonl | sort | uniq -c # Failed dd-cli calls (agent flailing?) jq -r 'select(.exit_ok == false) | "\(.ts) \(.command)"' ~/.claude/dd-guard/audit.jsonl ``` When the user asks a money question ("how much this week?"), prefer `/doordash-report` — it reconciles against real `dd-cli order history` and labels intent-only numbers honestly. Raw checkout_url counts are intents: the human may have abandoned the payment page. ## Honest semantics - **checkout_url ≠ purchase.** It records that a link was issued. Only reconciliation against `order history` confirms money moved. - Subtotals (when present via doordash-spend-guard's ledger) are pre-fee. - The log records what went through Claude Code's Bash tool — orders placed by the human directly in a terminal or app are invisible to it. ## Maintenance - **Rotation**: when audit.jsonl exceeds ~5 MB, rotate: `mv audit.jsonl audit-$(date +%Y%m).jsonl && gzip audit-*.jsonl` (keep the gzips; they are the history). - **Never edit lines** — append-only is the audit property. Corrections go in reports, not in the log. - **Privacy**: this is a plaintext record of eating habits and schedules. Keep `~/.claude/dd-guard/` out of repos and backups you share. Mention this to the user the first time you query the log in a session.

Frequently asked questions