spree-promotions
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides legitimate developer documentation for the Spree e-commerce framework. It includes code templates for creating promotions, custom rules, actions, and calculators using standard Ruby on Rails patterns. No security risks were identified during the analysis.
- [REMOTE_CODE_EXECUTION]: No remote code execution patterns or external package installations were detected. The references to local documentation paths (e.g., node_modules/@spree/docs) are descriptive and do not trigger remote fetching.
- [DATA_EXFILTRATION]: No network operations, credential exposures, or attempts to access sensitive system files were found.
- [INDIRECT_PROMPT_INJECTION]: While the skill describes processing order and cart data, it does not demonstrate any unsafe interpolation of untrusted data into prompt contexts or execute commands based on external input.
Audit Metadata