kr2s-was-i-vulnerable
Pass
Audited by Gen Agent Trust Hub on Jul 31, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the agent to fetch a security advisory from the official Rails GitHub repository (github.com/rails/rails). This reference to a trusted source is necessary for accurate vulnerability assessment and does not involve executing untrusted code.
- [COMMAND_EXECUTION]: The skill provides several command-line templates for searching code, managing git worktrees, and probing environment configurations. While these involve shell and Ruby execution (e.g.,
git worktree add,bin/rails runner), they are presented as instructions for an operator to perform a security audit and are standard practices for this type of investigative tool. - [PROMPT_INJECTION]: The skill represents a surface for indirect prompt injection because it is designed to ingest and analyze untrusted data from an external Rails application's codebase.
- Ingestion points: Target application source files including
db/schema.rb,config/application.rb,Gemfile.lock,Dockerfile, and view templates. - Boundary markers: None specified for the content being analyzed.
- Capability inventory: The agent has the capability to suggest powerful shell commands and Ruby code snippets to an operator based on its findings.
- Sanitization: No specific sanitization or filtering of the ingested code content is mentioned.
Audit Metadata