rails-performance-optimizer

Pass

Audited by Gen Agent Trust Hub on May 4, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill recommends the installation of well-known performance monitoring and utility gems from the RubyGems registry, including rack-mini-profiler, bullet, memory_profiler, and newrelic_rpm.
  • [EXTERNAL_DOWNLOADS]: The documentation includes a package.json example that references standard development dependencies from the NPM registry, such as postcss and autoprefixer, for asset pipeline optimization.
  • [COMMAND_EXECUTION]: Includes a code snippet that utilizes system backticks to execute the local ps command (e.g., ps -o rss= -p #{Process.pid}) to programmatically measure the memory footprint (RSS) of the current Ruby process during performance audits.
  • [SAFE]: Database interaction patterns demonstrated in the skill utilize standard ActiveRecord methods and include security best practices, such as using sanitize_sql for complex PostgreSQL full-text search queries to prevent SQL injection.
  • [SAFE]: Sensitive configurations, such as Redis URLs, CDN hosts, and APM keys, are correctly shown as being sourced from environment variables (e.g., ENV['REDIS_URL'], ENV['SCOUT_KEY']) rather than being hardcoded.
Audit Metadata
Risk Level
SAFE
Analyzed
May 4, 2026, 09:26 AM
Security Audit — agent-trust-hub — rails-performance-optimizer