create-engine-installer

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [SAFE]: The skill contains standard development boilerplate for creating Ruby on Rails engine generators. All code examples use conventional Rails generator methods such as create_file, inject_into_file, and route for host application configuration.\n- [COMMAND_EXECUTION]: The template in assets/installer-template.rb uses the rake 'railties:install:migrations' command. This is a standard and expected operation in Rails engine development to copy migration files to the host project.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes user requirements to generate installer code. To mitigate risks associated with automated code generation, it mandates a validation workflow (HARD-GATE) that includes testing for idempotency and manual verification of generated files before deployment.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 05:22 PM
Security Audit — agent-trust-hub — create-engine-installer