rails-new-project-setup
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFECOMMAND_EXECUTIONPRIVILEGE_ESCALATIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: Executes standard Ruby development tools and binstubs including
bundle add,bundle install,bin/rails, andbin/rubocopto configure the project environment. - [PRIVILEGE_ESCALATION]: The GitHub Actions CI template (
templates/ci.yml) includes commands to install system packages (libvips,chromium) usingsudo apt-get install. This is standard practice for CI runner environments to satisfy application dependencies and does not impact the host system where the agent runs. - [EXTERNAL_DOWNLOADS]: Fetches and installs standard Ruby gems from RubyGems.org and utilizes official GitHub Actions (e.g.,
actions/checkout,ruby/setup-ruby) within the CI workflow configuration. - [INDIRECT_PROMPT_INJECTION]: The skill processes project configuration files such as
Gemfileand.rubocop.ymlto determine necessary updates. While these are ingestion points for external data, the processing is limited to standard project scaffolding logic and poses low risk.
Audit Metadata