spree-customization

Pass

Audited by Gen Agent Trust Hub on Oct 1, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill serves as an educational and routing resource for the Spree E-commerce framework. It helps users choose between different customization patterns like Events, Decorators, and Dependency Injection.
  • [PROMPT_INJECTION]: No evidence of prompt injection, role-play bypasses, or instructions to ignore safety guidelines were found. The instructional language is standard for technical documentation.
  • [DATA_EXFILTRATION]: There are no patterns involving the access of sensitive files (e.g., credentials, ssh keys) or the transmission of data to external, untrusted domains.
  • [REMOTE_CODE_EXECUTION]: The skill mentions local CLI commands (spree generate ...) and Ruby metaprogramming techniques (Module.prepend), which are standard for the Spree ecosystem and do not involve fetching or executing untrusted remote code.
  • [OBFUSCATION]: No obfuscated strings, multi-layer encoding, homoglyphs, or hidden Unicode characters were detected in the content.
  • [DYNAMIC_CONTEXT_INJECTION]: The skill does not utilize dynamic context injection syntax (e.g., exclamation mark followed by backticks) to execute shell commands at load time.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 1, 2026, 02:26 PM