spree-inventory

Pass

Audited by Gen Agent Trust Hub on Oct 1, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill documents standard inventory management workflows, including database schema, API endpoints, and background job configurations for the Spree e-commerce platform.
  • [INDIRECT_PROMPT_INJECTION]: The skill describes mechanisms for bulk data ingestion from external ERP/WMS systems via the bulk_upsert API. While processing external data creates a potential surface for indirect prompt injection, the documentation specifies validation hooks and transactional integrity as safeguards.
  • [COMMAND_EXECUTION]: The instructions include standard administrative rake tasks (e.g., spree:stock:recount_levels) for maintaining data consistency. These are documented as routine maintenance operations for developers and administrators.
  • [PERSISTENCE]: The skill provides configuration examples for scheduling recurring background jobs (e.g., Spree::StockReservations::ExpireJob) using standard tools like Solid Queue or Sidekiq. These are legitimate application lifecycle management practices rather than malicious persistence mechanisms.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 1, 2026, 02:26 PM