ruby

Pass

Audited by Gen Agent Trust Hub on Jul 28, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill documents standard Ruby development CLI tools such as ruby, irb, gem, bundle, and rubocop. These are standard tools for the described purpose.
  • [REMOTE_CODE_EXECUTION]: The skill mentions bundle install and gem install for dependency management. It references well-known registries like rubygems.org and provides instructions for managing project-specific gems. These are standard practices in the Ruby ecosystem.
  • [DYNAMIC_EXECUTION]: The skill provides documentation on Ruby's dynamic features including eval, instance_eval, class_eval, and define_method. Crucially, it includes explicit security warnings in rules/metaprogramming.md advising developers to never call eval variants with strings built from user input to prevent arbitrary code execution.
  • [DATA_EXFILTRATION]: The skill contains a security warning in rules/core-syntax-and-types.md against dynamically creating symbols from unbounded user input (to_sym), which is a recognized best practice to prevent memory-related denial-of-service attacks.
  • [PROMPT_INJECTION]: No patterns attempting to override agent behavior or safety guidelines were detected. The instructional language is focused on technical guidance.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 28, 2026, 08:10 AM
Security Audit — agent-trust-hub — ruby