dhh-coder
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill includes an example for blocking disposable emails that fetches a domain list from a community repository on GitHub (raw.githubusercontent.com/disposable/disposable-email-domains).
- [EXTERNAL_DOWNLOADS]: A pattern for timezone detection in references/controllers-tips.md references the js-cookie library from a well-known CDN (cdn.jsdelivr.net).
- [COMMAND_EXECUTION]: Provides a template for a deployment script (bin/deploy) in references/config-tips.md that uses Git commands to manage production deployments after user confirmation.
- [DYNAMIC_EXECUTION]: The references/recording-pattern.md documentation describes a pattern using Rails' constantize method to dynamically load models for version history, which is a standard implementation for polymorphic associations.
- [INDIRECT_PROMPT_INJECTION]: The skill acts as a coding assistant processing user input for Ruby/Rails development. It leverages established architectural conventions such as REST purity and fat models as structural boundaries for code generation.
Audit Metadata