ruby-on-rails-dev
Pass
Audited by Gen Agent Trust Hub on Aug 10, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [SAFE]: The skill promotes secure development practices such as using parameter binding to prevent SQL injection, implementing deny-by-default authorization, and maintaining strict multi-tenant data isolation.
- [COMMAND_EXECUTION]: The skill instructs the agent to run
make rswaganddocker-compose. The instructions mitigate risk by recommending that these processes be executed within isolated Docker containers. - [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface as it ingests project-specific code and has the capability to execute shell commands. 1. Ingestion points: Ruby on Rails source files and API specifications. 2. Boundary markers: The instructions lack explicit delimiters for isolating ingested code. 3. Capability inventory: The skill utilizes subprocess calls for
makeanddocker-compose. 4. Sanitization: No input validation or sanitization for processed project files is defined.
Audit Metadata