spree-decorators
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a technical guide for developers working with the Spree framework. It provides code snippets that utilize standard Ruby and Rails architectural patterns.
- [COMMAND_EXECUTION]: The documentation mentions framework-specific CLI commands such as
spree generateandbin/rails g. These are standard tools for scaffolding code in a Rails environment and do not involve malicious command injection or unauthorized access. - [DYNAMIC_EXECUTION]: The skill explains the use of
Module#prependfor class decoration. This is a legitimate metaprogramming technique in Ruby used for extending existing classes without modifying original source code. The patterns provided do not involveeval()or the execution of untrusted external input. - [DATA_EXPOSURE]: The skill correctly advises using
sanitize_sql_likefor database queries and proper scoping in controller decorators to prevent data leaks between different stores or users, promoting secure coding practices.
Audit Metadata