rails-upgrade

Pass

Audited by Gen Agent Trust Hub on Nov 4, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes various development commands to facilitate the upgrade process.
  • Runs test suites using bundle exec rspec and bundle exec rails test to establish baselines and verify changes.
  • Uses bin/rails runner and bundle exec rails routes for smoke testing and environment verification.
  • Employs grep and find extensively to detect deprecated API usage and configuration patterns.
  • Runs custom Ruby scripts (scan_patterns.rb, gem_limits.rb) included in the skill to perform static analysis of the codebase and Gemfile.lock.
  • [EXTERNAL_DOWNLOADS]: The skill interacts with external services to gather dependency information.
  • Fetches gem version metadata from rubygems.org via its JSON API.
  • Submits the project's Gemfile.lock to api.railsbump.org to check for gem compatibility with target Rails versions. This is an established community service for Rails upgrades.
  • References documentation and source code from the official Rails GitHub repository.
  • [SAFE]: The skill demonstrates security awareness and adheres to its stated purpose.
  • Includes explicit instructions in workflows/08-generate-upgrade-report-workflow.md to redact sensitive values (keys, tokens, passwords) when quoting code in generated reports.
  • Follows a strict sequential upgrade path (no version skipping) as a safety measure for the application stability.
  • Delegates complex tasks like dual-boot setup and framework default alignment to other specialized skills from the same author.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 4, 2026, 06:05 PM