rubycritic
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The
scripts/check_quality.shscript automatically installs therubycriticgem viagem installorbundle installif it is not detected on the system. These operations utilize the official RubyGems repository and are standard for developer tools. - [COMMAND_EXECUTION]: The skill executes shell commands to perform code analysis and manage project dependencies. It uses
sedto modify the local project'sGemfileensuringrubycriticis available as a development dependency. - [INDIRECT_PROMPT_INJECTION]: As the skill analyzes untrusted Ruby source code from the local filesystem, there is a theoretical surface for indirect prompt injection via code comments.
- Ingestion points: Ruby (.rb) source files processed by the analyzer.
- Boundary markers: Absent; the agent processes the console output of the analysis script.
- Capability inventory: Shell command execution and local file modification (Gemfile).
- Sanitization: Absent; the tool processes source code directly to generate quality reports.
Audit Metadata