appwrite-ruby
Pass
Audited by Gen Agent Trust Hub on Aug 12, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as official documentation for the Appwrite Ruby SDK, providing standard implementation patterns for server-side Ruby applications.
- [SAFE]: Secret management follows industry best practices by instructing users to use environment variables (e.g.,
ENV['APPWRITE_API_KEY']) instead of hardcoding credentials in the source code. - [SAFE]: External dependencies are limited to the official
appwriteRuby gem installed from standard package registries. - [SAFE]: Network communications are directed to the official Appwrite cloud domain (
appwrite.io) or user-configured endpoints. - [SAFE]: The skill includes proactive security guidance regarding resource permissions (roles and permissions helpers) and secure cookie configuration (HttpOnly, Secure, SameSite) to mitigate common web vulnerabilities like XSS and CSRF.
- [SAFE]: In the context of serverless functions, the skill correctly documents how to access incoming request data (
context.req.body). While this represents a data ingestion surface, it is a fundamental requirement for the documented functionality and is presented without dangerous execution patterns.
Audit Metadata