The Agent Skills Directory

[COMMAND_EXECUTION]: The skill executes local development commands including bundle exec and bin/rails to analyze the application, run its test suite, and check for deprecations. This behavior is standard and necessary for performing Rails upgrades.\n- [EXTERNAL_DOWNLOADS]: The skill makes network requests to rubygems.org and api.railsbump.org to verify gem version compatibility and fetch release data. These are established and well-known services for Ruby developers.\n- [INDIRECT_PROMPT_INJECTION]: The skill performs analysis on the provided application codebase, creating an attack surface where untrusted data (the code) enters the agent context. However, the skill includes explicit instructions in workflows/08-generate-upgrade-report-workflow.md to redact secret values (keys, tokens, passwords) from code snippets before they are included in generated reports.\n- [SAFE]: No security concerns were identified. The skill follows a methodical process, utilizes reputable external resources, and maintains a security-conscious approach by avoiding the exposure of credentials.

rails-upgrade