spree-providers
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a developer guide for extending the Spree e-commerce ecosystem. It contains architectural maps and implementation examples for various service providers (Tax, Payments, Shipping, etc.).
- [CREDENTIALS_SAFE]: Code examples for authentication (OpenID Connect) and integration credentials correctly demonstrate the use of environment variables (e.g.,
ENV['ENTRA_CLIENT_SECRET']) and masked database preferences, which are standard security best practices for secret management. - [EXTERNAL_DOWNLOADS]: The documentation references official Spree ecosystem gems and integration guides for well-known, trusted services like Stripe, Microsoft, and Meilisearch. These references are informative and originate from trusted or well-known organizations.
- [COMMAND_EXECUTION]: Ruby implementation snippets utilize standard Rails initialization patterns (
config.after_initialize) and class inheritance. There is no evidence of arbitrary command execution, shell injection, or unsafe process spawning.
Audit Metadata