rails-expert
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes standard Ruby on Rails and Bundler CLI commands for development workflows, including resource scaffolding, database migrations, and running test suites. These are benign and appropriate for the skill's stated purpose as a Rails development expert.
- [INDIRECT_PROMPT_INJECTION]: The skill acts as a code generation assistant that processes user requirements into Rails implementations. The risk of processing malicious data is mitigated by the skill's explicit constraints and templates that enforce security best practices.
- Ingestion points: User requirements for models, routes, and business logic enter the context as described in
SKILL.md. - Boundary markers: None identified.
- Capability inventory: File system modification and shell execution via standard Rails tooling (
rails,bundle). - Sanitization: The skill explicitly mandates and provides examples for using Strong Parameters in controllers and
sanitize_sql_likein Active Record queries to prevent injection attacks.
Audit Metadata