spree-api-v3
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFECREDENTIALS_UNSAFEEXTERNAL_DOWNLOADS
Full Analysis
- [SAFE]: The skill serves as an instructional guide for the Spree API v3, providing usage patterns and debugging advice.
- [CREDENTIALS_UNSAFE]: A hardcoded publishable key (
pk_CzEKBTWFiuNLgz4wciLsS59n) is included in acurlexample for the Store API. Per the vendor's API design, publishable keys are intended for public client-side use and are not considered sensitive secrets. The Admin API examples correctly use placeholders (sk_…) for secret keys. - [EXTERNAL_DOWNLOADS]: The documentation references the official
@spree/sdkand@spree/admin-sdkNode.js packages, which are legitimate resources provided by the vendor for API integration.
Audit Metadata