rubocop
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides documentation and workflow instructions for the RuboCop Ruby linter. All command-line examples and configuration snippets align with standard usage.
- [SAFE]: The attack surface for indirect prompt injection is inherent to the tool's primary purpose of analyzing source code. 1. Ingestion points: Ruby project files (.rb, Gemfile). 2. Boundary markers: None. 3. Capability inventory: rubocop execution via shell. 4. Sanitization: None.
- [SAFE]: The inclusion of eval() in references/cop_reference.md is provided as an example of insecure code that RuboCop is designed to detect and flag. This is a false positive from static analysis detectors.
- [SAFE]: No obfuscation, data exfiltration attempts, or unauthorized persistence mechanisms were found in any of the skill's files.
Audit Metadata