rails-debugger
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the Bash tool to run common Rails development commands such as
bin/rails db:migrate:status,bundle exec rspec, and Git commands likegit logandgit diff. These actions are consistent with the skill's stated purpose of debugging and analyzing code changes.\n- [EXTERNAL_DOWNLOADS]: The skill includes instructions to runbundle install, which fetches external Ruby gems from a registry. This is an expected and standard practice for managing application dependencies.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes potentially untrusted data through log analysis.\n - Ingestion points: Reading
log/development.logviatailandgrep.\n - Boundary markers: None identified in the prompt instructions to delineate log content from instructions.\n
- Capability inventory: The skill has access to the
Bashtool, enabling shell command execution, and theReadtool for file access.\n - Sanitization: No specific sanitization or filtering of log content is mentioned before the agent processes it.
Audit Metadata