rails-blocks-cli
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the agent to install the
rails-blocks-cliRuby gem. This is a vendor-owned resource provided by rails-blocks and is essential for the skill's primary functionality. - [COMMAND_EXECUTION]: The skill uses the
rails-blockscommand-line utility to perform various tasks, including component discovery, documentation retrieval, and installation of UI files. These commands are executed within the context of the user's Rails application. - [INDIRECT_PROMPT_INJECTION]: The skill has an indirect prompt injection surface as it reads and processes documentation and examples from the external CLI tool.
- Ingestion points: Data is ingested through
rails-blocks docs COMPONENTandrails-blocks examples COMPONENT(SKILL.md). - Boundary markers: No specific delimiters or "ignore instructions" warnings are defined for the ingested documentation content.
- Capability inventory: The agent has the capability to install gems, write files to the local file system (via
rails-blocks install), and view project diffs (SKILL.md). - Sanitization: There is no explicit sanitization or schema validation performed on the text returned by the documentation or example commands.
Audit Metadata