ruby
Pass
Audited by Gen Agent Trust Hub on Jul 28, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill documents standard Ruby development CLI tools such as
ruby,irb,gem,bundle, andrubocop. These are standard tools for the described purpose. - [REMOTE_CODE_EXECUTION]: The skill mentions
bundle installandgem installfor dependency management. It references well-known registries likerubygems.organd provides instructions for managing project-specific gems. These are standard practices in the Ruby ecosystem. - [DYNAMIC_EXECUTION]: The skill provides documentation on Ruby's dynamic features including
eval,instance_eval,class_eval, anddefine_method. Crucially, it includes explicit security warnings inrules/metaprogramming.mdadvising developers to never callevalvariants with strings built from user input to prevent arbitrary code execution. - [DATA_EXFILTRATION]: The skill contains a security warning in
rules/core-syntax-and-types.mdagainst dynamically creating symbols from unbounded user input (to_sym), which is a recognized best practice to prevent memory-related denial-of-service attacks. - [PROMPT_INJECTION]: No patterns attempting to override agent behavior or safety guidelines were detected. The instructional language is focused on technical guidance.
Audit Metadata