create-engine
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to use standard Rails CLI tools, such as
rails plugin new,bundle exec rspec, andrake. These commands are standard for software development and are used appropriately within the scope of code generation and verification. - [EXTERNAL_DOWNLOADS]: The provided CI configuration in
TESTING.mdreferences official GitHub Actions (actions/checkoutandruby/setup-ruby). These references use full commit hashes (e.g.,34e114876b0b11c390a56381ad16ebd13914f8d5), which is a security best practice for pinning dependencies to prevent supply chain attacks. - [SAFE]: The
SKILL.mdfile defines a "HARD-GATE" section that mandates safety checks, specifically forbidding patterns that would automatically apply database migrations at boot. This prevents generated code from making unexpected or destructive changes to the host application's database state.
Audit Metadata