spree-dashboard
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The documentation describes using the official
create-spree-appinitializer and thespree addcommand, which may fetch templates from Git repositories. These are standard developer tools provided by the Spree organization for project setup. - [COMMAND_EXECUTION]: The skill provides standard development workflow commands, including package management (
pnpm dev,pnpm test) and project-specific CLI tools (spree dev,spree build). These commands are necessary for building and testing the React-based dashboard. - [DATA_EXPOSURE]: The skill includes a specific security best practice warning for developers, advising that
VITE_*environment variables are compiled into the application bundle and must never contain secrets. - [INDIRECT_PROMPT_INJECTION]: The skill outlines how to ingest data from the Spree Admin API using the
adminClient. It recommends using Zod schemas for form validation and mapping server-side 422 validation errors, which helps mitigate risks associated with untrusted data ingestion.
Audit Metadata