security-review-process
Pass
Audited by Gen Agent Trust Hub on Jul 28, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists of educational guidelines and process steps for identifying security vulnerabilities in Ruby applications. It does not perform any malicious actions.
- [COMMAND_EXECUTION]: The skill instructs the user to run
bundle exec bundle-audit check --update. This is a recognized best practice in the Ruby ecosystem for auditing project dependencies against a database of known vulnerabilities (CVEs). - [PROMPT_INJECTION]: The instructions include a defensive measure against indirect prompt injection by advising developers to discard or neutralize instruction-like keys (e.g., 'prompt', 'instructions') in processed JSON payloads.
Audit Metadata