ruby
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied Ruby and Rails source code for review, which constitutes an untrusted data ingestion surface. The risk is assessed as safe because the skill's capabilities are limited to generating textual advice and refactoring suggestions, without access to sensitive system operations. 1. Ingestion points: Ruby and Rails source code provided by the user (SKILL.md). 2. Boundary markers: None explicitly defined. 3. Capability inventory: Text-based code review and architectural advice; no network, file-write, or subprocess capabilities are present. 4. Sanitization: None specified for input code.
- [SAFE]: The skill serves as a technical reference for Ruby development, utilizing official documentation and industry-standard tools like RSpec and FactoryBot. No malicious patterns, such as prompt injection, data exfiltration, or unauthorized command execution, were detected.
Audit Metadata