rails-conventions
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to run
bin/rubocopandgit diffcommands. These are standard, local utility commands used for code quality checks in a Ruby on Rails development environment. - [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from the local repository via
git diffto analyze code changes. This data is processed using grep-based pattern matching to identify debug statements or style issues. While it lacks explicit boundary markers for this untrusted input, the narrow scope of pattern matching poses a low risk of the agent interpreting the code as instructions.
Audit Metadata