rails-query
Pass
Audited by Gen Agent Trust Hub on May 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute shell commands using
bin/rails queryandbin/kamal query. These commands take strings (Ruby expressions or SQL) as arguments, which are executed in the application context. - [DATA_EXFILTRATION]: Facilitates access to sensitive application data by providing instructions for querying databases, including production and staging environments. The skill emphasizes that the
rails querycommand is read-only by construction at the connection level to mitigate write risks. - [REMOTE_CODE_EXECUTION]: Explicitly states that Ruby expressions are processed using
evalwithin the Rails application context. While this is the intended design of the documented Rails feature, it constitutes a high-privilege execution environment.
Audit Metadata