rails-spinel-native-binary
Warn
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: MEDIUMPRIVILEGE_ESCALATIONCOMMAND_EXECUTIONREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [PRIVILEGE_ESCALATION]: The instructions require the user to use sudo for installing system-level compiler dependencies such as clang and libclang-dev through package managers.
- [COMMAND_EXECUTION]: The skill provides scripts and instructions that use commands like kill and pgrep for process management, and suggests using gdb with ptrace for troubleshooting compiler hangs.
- [REMOTE_CODE_EXECUTION]: The workflow involves downloading source code from external GitHub repositories and executing build commands (cargo build, make). It also mentions an alternative installation method using a curl | sh pipeline.
- [EXTERNAL_DOWNLOADS]: The skill fetches toolchain source code from external Git repositories to facilitate the ahead-of-time compilation process.
- [INDIRECT_PROMPT_INJECTION]: The skill's scripts process local application code, creating an attack surface for indirect prompt injection.
- Ingestion points: Processes files in the user's local Rails application, including Ruby source files and YAML configurations.
- Boundary markers: None present to distinguish between instructions and data during processing.
- Capability inventory: The skill can read and modify files, execute build tools, and run database scripts.
- Sanitization: Employs the Prism parser for Ruby code analysis and YAML.safe_load for configuration files.
Audit Metadata