rails-refactorer
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests and analyzes local source code using discovery tools like
Read,Grep, andGlob. This introduces a theoretical attack surface for indirect prompt injection if the project code being refactored contains hidden malicious instructions. However, the skill's methodology includes mandatory analysis steps and the execution of existing test suites, which serves as a natural verification process. - [SAFE]: The skill promotes the use of well-known, established security tools for Rails development, including
strong_migrationsfor catching dangerous database operations andanchor_migrationsfor DDL lock protection. These recommendations align with professional software engineering safety standards.
Audit Metadata