rails-security-multitenancy
Pass
Audited by Gen Agent Trust Hub on Jun 24, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill exclusively contains architectural guidelines and code patterns aimed at improving security posture in Rails applications.
- [SAFE]: It provides patterns to prevent data exposure via scoped lookups and tenant isolation, ensuring that database queries are always constrained by the current user's or account's context.
- [SAFE]: It includes defensive patterns against Server-Side Request Forgery (SSRF) for features like webhooks and URL unfurling, including DNS validation, IP blocklisting (loopback/private/link-local), and IP-pinning to prevent DNS rebinding.
- [SAFE]: No malicious command execution, prompt injection, or credential harvesting patterns were identified. The content is instructional and promotes secure development practices such as rate limiting, anti-enumeration, and strict authorization defaults.
Audit Metadata