spree-returns
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a technical reference for the Spree 6 returns, exchanges, and claims system. It describes legitimate business logic, data structures, and developer workflows.
- [INDIRECT_PROMPT_INJECTION]: The skill outlines the processing of external data (e.g., return reasons, customer memos, and claim descriptions). It correctly identifies built-in validation hooks and eligibility validators as the primary defense mechanism for ensuring data integrity during these workflows.
- [EXTERNAL_DOWNLOADS]: The documentation refers to further reading located in project-local
node_modules/@spree/docspaths, which is standard for developer-centric documentation and does not involve fetching untrusted remote resources. - [COMMAND_EXECUTION]: Example
curlcommands are provided for demonstrating API interactions. These are standard documentation examples for local or administrative API usage and do not instruct the agent to execute arbitrary or malicious shell commands.
Audit Metadata