alba-inertia
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [SAFE]: No security issues detected. The skill provides legitimate instructions for using Alba and Typelizer gems to manage serialization and type safety in Ruby on Rails applications.
- [INDIRECT_PROMPT_INJECTION]: The skill defines resources that ingest data from Rails models, global
Currentattributes, and controller parameters (e.g.,obj.params.dig(:filters, :search)inSKILL.md). While this represents a data ingestion surface, the skill does not possess capabilities such as network exfiltration or system command execution that could be misused by malicious input. - [DYNAMIC_EXECUTION]: The skill mentions using a Rake task (
bin/rake typelizer:generate) to generate TypeScript definition files from Ruby code. This is a standard static code generation process used during development and does not facilitate unsafe runtime code execution.
Audit Metadata