rails-conventions

Pass

Audited by Gen Agent Trust Hub on Sep 24, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill instructs the agent to run bin/rubocop and git diff commands. These are standard, local utility commands used for code quality checks in a Ruby on Rails development environment.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from the local repository via git diff to analyze code changes. This data is processed using grep-based pattern matching to identify debug statements or style issues. While it lacks explicit boundary markers for this untrusted input, the narrow scope of pattern matching poses a low risk of the agent interpreting the code as instructions.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 24, 2026, 07:43 AM
Security Audit — agent-trust-hub — rails-conventions