spree-marketplace
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a technical implementation guide for Spree 6 marketplace features, focusing on sellers, commissions, and payouts. No malicious command execution, exfiltration, or persistence patterns were found.
- [SAFE]: The documentation includes security best practices, such as warning developers not to trust customer-writable metadata for fraud or approval flags, and advising against hardcoding credentials in environment variables.
- [SAFE]: All referenced dependencies (e.g., @spree/seller-sdk, spree_stripe) are legitimate components of the Spree ecosystem and are associated with the skill's verified author.
- [SAFE]: The instruction set does not contain any prompt injection attempts or obfuscation techniques.
Audit Metadata