spree-project

Pass

Audited by Gen Agent Trust Hub on Jun 14, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill documents a wide range of developer commands for managing the Spree Commerce stack, including database migrations, resource generation, and general command execution via spree exec. These are standard tools for the identified project type.
  • [EXTERNAL_DOWNLOADS]: The skill references developer documentation hosted on the official Spree Commerce website (spreecommerce.org), which is an expected and safe source for this vendor.
  • [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection via the processing of external data.
  • Ingestion points: The agent is instructed to read documentation from the node_modules/@spree/docs/dist/ directory to guide its actions.
  • Boundary markers: There are no explicit instructions to ignore or treat embedded instructions within the documentation files as data rather than commands.
  • Capability inventory: The skill allows for significant system interaction through the spree CLI and bin/rails, including the ability to execute arbitrary commands through spree exec and destructive operations like db:reset.
  • Sanitization: No validation or sanitization of the content within the documentation files is performed before it is used to inform the agent's logic.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 14, 2026, 11:01 AM
Security Audit — agent-trust-hub — spree-project