create-engine
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
- [SAFE]: The skill includes explicit security guidelines for the agent, such as a 'HARD-GATE' checklist that prevents common security pitfalls like auto-applying database migrations or hardcoding host application constants. The included GitHub Action examples use pinned commit hashes, demonstrating a security-conscious approach to dependency management.
- [COMMAND_EXECUTION]: The skill directs the agent to execute standard Ruby on Rails and system commands for project scaffolding, routing verification, and automated testing (e.g.,
rails plugin new,bundle exec rake,bundle exec rails routes). These commands are integral to the stated purpose of creating and verifying Rails engines. - [DYNAMIC_EXECUTION]: Code templates include the use of
constantizefor mapping configuration strings to Ruby classes. This is a common and expected pattern in Rails engines to allow the host application to specify which model classes the engine should interact with.
Audit Metadata