Borrowing it
Nothing to install: this file belongs to bojanrajkovic/mcp-paprika. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/bojanrajkovic/mcp-paprika/main/.claude/skills/capture-paprika-wire-format/SKILL.mdgit clone --depth 1 https://github.com/bojanrajkovic/mcp-paprikaWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/bojanrajkovic/mcp-paprika/capture-paprika-wire-format)<a href="https://agentmods.dev/skills/bojanrajkovic/mcp-paprika/capture-paprika-wire-format"><img src="https://agentmods.dev/badge/skills/bojanrajkovic/mcp-paprika/capture-paprika-wire-format/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/bojanrajkovic/mcp-paprika/capture-paprika-wire-format"><img src="https://agentmods.dev/badge/skills/bojanrajkovic/mcp-paprika/capture-paprika-wire-format.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00086 | $0.04302 |
| Opus 5.5 | $0.00034 | $0.01721 |
| Sonnet 5.5 | $0.00017 | $0.00860 |
| Haiku 4.5 | $0.00009 | $0.00430 |
Grade B, and why
capture-paprika-wire-format scanned grade B with 2 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Asks for rootmediumPrivilege escalation
A mod that escalates privileges can change anything on the machine, not only the project.
|| echo "✗ CA cert not trusted — run: sudo security add-trusted-cert -d -r trustRoot -k /Library/Keychains/System.keychain ~/.mitmproxy/mitmproxy-ca-cert.pem" Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
curl -sf -H "Authorization: Bearer $(curl -sf -X POST \ How it starts
The opening of the file, as written. The whole thing — 378 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Capture Paprika Wire Format
Overview
End-to-end pipeline for capturing Paprika Cloud Sync API wire format via mitmproxy interception of the macOS desktop client. Produces sanitized HAR 1.2 files with named entries and strongly-typed TypeScript fixture modules for tests.
When to Use
- Reverse-engineering an undocumented Paprika API surface (e.g., bookmarks, pantry locations, custom meal types)
- Verifying wire format assumptions before implementing a new entity type
- Updating existing captures after Paprika app updates change the wire format
- A GitHub issue's DoD includes "capture wire format" or "decoded bodies pasted as comments"
Prerequisites Check
Run these checks before starting. Offer to install anything missing.
# 1. mitmproxy
if command -v mitmdump &>/dev/null; then
echo "✓ mitmdump $(mitmdump --version 2>&1 | head -1)"
else
echo "✗ mitmdump not found — install with: brew install mitmproxy"
# Offer: "Should I run brew install mitmproxy?"
fi
# 2. mitmproxy CA cert
if [ -f ~/.mitmproxy/mitmproxy-ca-cert.pem ]; then
echo "✓ mitmproxy CA cert exists"
# Verify it's trusted (security find-certificate returns 0 if found)
security find-certificate -c "mitmproxy" /Library/Keychains/System.keychain &>/dev/null \
&& echo "✓ CA cert is trusted" \
|| echo "✗ CA cert not trusted — run: sudo security add-trusted-cert -d -r trustRoot -k /Library/Keychains/System.keychain ~/.mitmproxy/mitmproxy-ca-cert.pem"
else
echo "✗ CA cert missing — run mitmdump once to generate it, then trust it"
fi
# 3. Paprika app
if [ -d "/Applications/Paprika Recipe Manager 3.app" ]; then
echo "✓ Paprika Recipe Manager 3 installed"
else
echo "✗ Paprika Recipe Manager 3 not found in /Applications"
fi
# 4. Network service (find the active one — not always "Wi-Fi")
NETWORK_SERVICE=$(networksetup -listallnetworkservices | grep -v '^\*' | while read svc; do
networksetup -getinfo "$svc" 2>/dev/null | grep -q "IP address: [0-9]" && echo "$svc" && break
done)
echo "Active network service: ${NETWORK_SERVICE:-UNKNOWN}"
# 5. Paprika credentials
ENV_FILE="$(python3 -c "
import os, json
# Check XDG config, then macOS default
for base in [os.environ.get('XDG_CONFIG_HOME', ''), os.path.expanduser('~/Library/Preferences')]:
p = os.path.join(base, 'mcp-paprika', '.env')
if os.path.isfile(p):
print(p)
break
" 2>/dev/null)"
if [ -n "$ENV_FILE" ]; then
echo "✓ Credentials at: $ENV_FILE"
grep -qc 'PAPRIKA_EMAIL' "$ENV_FILE" && echo " ✓ PAPRIKA_EMAIL present" || echo " ✗ PAPRIKA_EMAIL missing"
grep -qc 'PAPRIKA_PASSWORD' "$ENV_FILE" && echo " ✓ PAPRIKA_PASSWORD present" || echo " ✗ PAPRIKA_PASSWORD missing"
else
echo "✗ No .env found — check XDG_CONFIG_HOME/mcp-paprika/.env or $ENV_FILE"
fi
# 6. computer-use MCP (can't check programmatically — just note it)
echo "? computer-use MCP: verify it's available (call mcp__computer-use__list_granted_applications)"
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2mo ago First seen · 378 lines · 86 tokens per session scan B de8bfe72623a
capture-paprika-wire-format is a skill published in the GitHub repository bojanrajkovic/mcp-paprika (2 stars, last pushed 4d ago), licensed MIT. It adds 86 tokens to every session and 4,302 once invoked, about $0.0003 per session on Opus 5.5. A static security scan graded it B with 2 findings (asks for root, makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
capture-paprika-wire-format compared with skills from other repositories
| Mod | Type | Stars | Last push | Licence | Scan | Tokens | Works with |
|---|---|---|---|---|---|---|---|
| capture-paprika-wire-formatbojanrajkovic/mcp-paprika | Skill | 2 | 4d ago | MIT | B | 86 | Claude Code |
| api-integration-architectsickn33/agentic-awesome-skills | Skill | 49k | today | MIT | A | 33 | Claude Code |
| printing-press-amendmvanhorn/cli-printing-press | Skill | 4.9k | today | MIT | A | 222 | Claude Code |
| convex-performance-auditopenclaw/clawhub | Skill | 9.5k | today | MIT | A | 38 | Codex |
| convex-insightsopenclaw/clawhub | Skill | 9.5k | today | MIT | A | 45 | Claude Code, Codex |
| axiom-networkingCharlesWiltgen/Axiom | Skill | 1.3k | today | MIT | A | 37 | Claude Code |
| diagnose-backend-bugQoderAI/better-harness | Skill | 2.4k | 17d ago | MIT | A | 87 | Claude Code, Codex |