spree-customization
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as an educational and routing resource for the Spree E-commerce framework. It helps users choose between different customization patterns like Events, Decorators, and Dependency Injection.
- [PROMPT_INJECTION]: No evidence of prompt injection, role-play bypasses, or instructions to ignore safety guidelines were found. The instructional language is standard for technical documentation.
- [DATA_EXFILTRATION]: There are no patterns involving the access of sensitive files (e.g., credentials, ssh keys) or the transmission of data to external, untrusted domains.
- [REMOTE_CODE_EXECUTION]: The skill mentions local CLI commands (
spree generate ...) and Ruby metaprogramming techniques (Module.prepend), which are standard for the Spree ecosystem and do not involve fetching or executing untrusted remote code. - [OBFUSCATION]: No obfuscated strings, multi-layer encoding, homoglyphs, or hidden Unicode characters were detected in the content.
- [DYNAMIC_CONTEXT_INJECTION]: The skill does not utilize dynamic context injection syntax (e.g., exclamation mark followed by backticks) to execute shell commands at load time.
Audit Metadata