rails-deps
Pass
Audited by Gen Agent Trust Hub on Oct 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill references and installs highly reputable, well-known Ruby gems from established community members. All external links point to official GitHub repositories and documentation sites.
- [INDIRECT_PROMPT_INJECTION]: The skill possesses an indirect prompt injection attack surface as it is designed to analyze project code and ERB templates.
- Ingestion points: Project source files are accessed using
Read,Glob, andGreptools in SKILL.md, and ERB templates are processed by theherbCLI tool as described in references/herb.md. - Boundary markers: The instructions do not specify explicit delimiters or "ignore" warnings for content read from the project file system.
- Capability inventory: The skill has access to the
Bashtool, allowing it to execute gem installation commands and Rails project generators. - Sanitization: Standard Rails generation and installation procedures are followed; no specific sanitization of input files is described, which is typical for development-oriented tooling.
Audit Metadata