spree-checkout

Pass

Audited by Gen Agent Trust Hub on Oct 1, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill serves as a technical reference for the Spree e-commerce framework. It contains standard Ruby on Rails code patterns for subclassing services and decorating models.
  • [NO_CODE]: While the skill contains code snippets, these are provided as documentation and examples for the agent to use when assisting a developer. They do not contain executable shell commands, network operations, or sensitive file access.
  • [REMOTE_CODE_EXECUTION]: There are no patterns of remote code execution. References to gems like spree_core and documentation paths in node_modules are standard for the described framework.
  • [DATA_EXFILTRATION]: No data exfiltration vectors were identified. The mention of X-Spree-Token and Order.token correctly describes the framework's mechanism for handling guest checkout sessions and is not used to harvest credentials.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 1, 2026, 02:26 PM