rails-query

Pass

Audited by Gen Agent Trust Hub on May 16, 2026

Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
  • [COMMAND_EXECUTION]: The skill instructs the agent to execute shell commands using bin/rails query and bin/kamal query. These commands take strings (Ruby expressions or SQL) as arguments, which are executed in the application context.
  • [DATA_EXFILTRATION]: Facilitates access to sensitive application data by providing instructions for querying databases, including production and staging environments. The skill emphasizes that the rails query command is read-only by construction at the connection level to mitigate write risks.
  • [REMOTE_CODE_EXECUTION]: Explicitly states that Ruby expressions are processed using eval within the Rails application context. While this is the intended design of the documented Rails feature, it constitutes a high-privilege execution environment.
Audit Metadata
Risk Level
SAFE
Analyzed
May 16, 2026, 12:49 AM
Security Audit — agent-trust-hub — rails-query