spree-inventory
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill documents standard inventory management workflows, including database schema, API endpoints, and background job configurations for the Spree e-commerce platform.
- [INDIRECT_PROMPT_INJECTION]: The skill describes mechanisms for bulk data ingestion from external ERP/WMS systems via the
bulk_upsertAPI. While processing external data creates a potential surface for indirect prompt injection, the documentation specifies validation hooks and transactional integrity as safeguards. - [COMMAND_EXECUTION]: The instructions include standard administrative rake tasks (e.g.,
spree:stock:recount_levels) for maintaining data consistency. These are documented as routine maintenance operations for developers and administrators. - [PERSISTENCE]: The skill provides configuration examples for scheduling recurring background jobs (e.g.,
Spree::StockReservations::ExpireJob) using standard tools like Solid Queue or Sidekiq. These are legitimate application lifecycle management practices rather than malicious persistence mechanisms.
Audit Metadata