The Agent Skills Directory

[SAFE]: The skill performs Rails application analysis using standard tools like grep, glob, and read. It does not generate or execute arbitrary shell scripts from untrusted sources.
[SAFE]: External network communication is restricted to well-known and relevant services: rubygems.org (for Rails version metadata) and railsbump.org (for gem compatibility reports). These operations are essential for the skill's primary function and target reputable platforms associated with the skill's authoring organization (OmbuLabs).
[SAFE]: Data handling is appropriate for the task. The skill reads project manifest files (Gemfile, Gemfile.lock) and configuration files to provide upgrade guidance. The transmission of Gemfile.lock to the RailsBump API is a documented part of the upgrade workflow and does not involve sensitive credentials.
[SAFE]: The skill promotes secure development practices by including mandatory steps for running test suites before making changes and verifying CI configurations for drift.

rails-upgrade