ruby-on-rails-dev
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process and review Ruby on Rails code changes, which acts as a surface for untrusted data ingestion.
- Ingestion points: Rails application components such as controllers, services, policies, and workers as described in SKILL.md.
- Boundary markers: No specific delimiters are defined in the instructions to isolate user-provided code from the agent's instructions.
- Capability inventory: The skill does not request any tools in its frontmatter and contains no executable scripts or network operations.
- Sanitization: The instructions explicitly mandate the use of parameter binding/Arel for SQL queries and the verification of redaction behavior in logging.
- [SAFE]: The skill actively promotes security by requiring specialized security reviews ($review.gil security) for operations involving authentication, secrets, tenancy, and PII/PHI. No evidence of obfuscation, remote code execution, or persistence mechanisms was found.
Audit Metadata