spree-decorators

Pass

Audited by Gen Agent Trust Hub on Oct 1, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill serves as a technical guide for developers working with the Spree framework. It provides code snippets that utilize standard Ruby and Rails architectural patterns.
  • [COMMAND_EXECUTION]: The documentation mentions framework-specific CLI commands such as spree generate and bin/rails g. These are standard tools for scaffolding code in a Rails environment and do not involve malicious command injection or unauthorized access.
  • [DYNAMIC_EXECUTION]: The skill explains the use of Module#prepend for class decoration. This is a legitimate metaprogramming technique in Ruby used for extending existing classes without modifying original source code. The patterns provided do not involve eval() or the execution of untrusted external input.
  • [DATA_EXPOSURE]: The skill correctly advises using sanitize_sql_like for database queries and proper scoping in controller decorators to prevent data leaks between different stores or users, promoting secure coding practices.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 1, 2026, 02:26 PM