ruby-version
Pass
Audited by Gen Agent Trust Hub on Jun 22, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses shell scripts to interact with the local
rbenvandruby-buildenvironment. This is the primary intended functionality of the skill. - [SAFE]: Input validation is properly implemented in
scripts/install.sh. The script usesgrep -Fxqto ensure the requested version string exactly matches a version in the known available list before proceeding with the installation. This effectively prevents shell command injection via the version argument. - [SAFE]: No remote downloads, external network requests, or access to sensitive user credentials or configuration files were detected. The skill relies entirely on pre-installed local tools like Homebrew and rbenv.
- [SAFE]: The skill's ingestion of local command output (from
rbenv install -l) is handled safely using text processing tools likeawkandgrepfor parsing, with no risk of indirect prompt injection affecting agent logic.
Audit Metadata