skills/iuhoay/skills/rails-deps/Gen Agent Trust Hub

rails-deps

Pass

Audited by Gen Agent Trust Hub on Oct 4, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [SAFE]: The skill references and installs highly reputable, well-known Ruby gems from established community members. All external links point to official GitHub repositories and documentation sites.
  • [INDIRECT_PROMPT_INJECTION]: The skill possesses an indirect prompt injection attack surface as it is designed to analyze project code and ERB templates.
  • Ingestion points: Project source files are accessed using Read, Glob, and Grep tools in SKILL.md, and ERB templates are processed by the herb CLI tool as described in references/herb.md.
  • Boundary markers: The instructions do not specify explicit delimiters or "ignore" warnings for content read from the project file system.
  • Capability inventory: The skill has access to the Bash tool, allowing it to execute gem installation commands and Rails project generators.
  • Sanitization: Standard Rails generation and installation procedures are followed; no specific sanitization of input files is described, which is typical for development-oriented tooling.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 4, 2026, 05:56 AM