create-engine

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill instructs the agent to use standard Rails CLI tools, such as rails plugin new, bundle exec rspec, and rake. These commands are standard for software development and are used appropriately within the scope of code generation and verification.
  • [EXTERNAL_DOWNLOADS]: The provided CI configuration in TESTING.md references official GitHub Actions (actions/checkout and ruby/setup-ruby). These references use full commit hashes (e.g., 34e114876b0b11c390a56381ad16ebd13914f8d5), which is a security best practice for pinning dependencies to prevent supply chain attacks.
  • [SAFE]: The SKILL.md file defines a "HARD-GATE" section that mandates safety checks, specifically forbidding patterns that would automatically apply database migrations at boot. This prevents generated code from making unexpected or destructive changes to the host application's database state.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 05:22 PM
Security Audit — agent-trust-hub — create-engine