skills/el-feo/ai-context/rubycritic/Gen Agent Trust Hub

rubycritic

Pass

Audited by Gen Agent Trust Hub on Oct 8, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The scripts/check_quality.sh script automatically installs the rubycritic gem via gem install or bundle install if it is not detected on the system. These operations utilize the official RubyGems repository and are standard for developer tools.
  • [COMMAND_EXECUTION]: The skill executes shell commands to perform code analysis and manage project dependencies. It uses sed to modify the local project's Gemfile ensuring rubycritic is available as a development dependency.
  • [INDIRECT_PROMPT_INJECTION]: As the skill analyzes untrusted Ruby source code from the local filesystem, there is a theoretical surface for indirect prompt injection via code comments.
  • Ingestion points: Ruby (.rb) source files processed by the analyzer.
  • Boundary markers: Absent; the agent processes the console output of the analysis script.
  • Capability inventory: Shell command execution and local file modification (Gemfile).
  • Sanitization: Absent; the tool processes source code directly to generate quality reports.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 8, 2026, 11:44 PM