spree-project
Pass
Audited by Gen Agent Trust Hub on Jun 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill documents a wide range of developer commands for managing the Spree Commerce stack, including database migrations, resource generation, and general command execution via
spree exec. These are standard tools for the identified project type. - [EXTERNAL_DOWNLOADS]: The skill references developer documentation hosted on the official Spree Commerce website (
spreecommerce.org), which is an expected and safe source for this vendor. - [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection via the processing of external data.
- Ingestion points: The agent is instructed to read documentation from the
node_modules/@spree/docs/dist/directory to guide its actions. - Boundary markers: There are no explicit instructions to ignore or treat embedded instructions within the documentation files as data rather than commands.
- Capability inventory: The skill allows for significant system interaction through the
spreeCLI andbin/rails, including the ability to execute arbitrary commands throughspree execand destructive operations likedb:reset. - Sanitization: No validation or sanitization of the content within the documentation files is performed before it is used to inform the agent's logic.
Audit Metadata