dhh-rails-style
Pass
Audited by Gen Agent Trust Hub on Jul 4, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides a collection of architectural and coding patterns for Ruby on Rails development focused on the "37signals" philosophy.
- [SAFE]: Includes explicit security guidance, such as SSRF protection logic in
references/architecture.mdthat validates IP addresses against private network ranges, and XSS prevention techniques in the same file using standard Rails helpers. - [SAFE]: Recommends the use of well-known, established libraries and tools from the Rails and 37signals ecosystem, such as Turbo, Stimulus, Solid Queue, and Kamal, which are industry-standard for this development style.
- [SAFE]: Provides implementation examples for modern security defenses, including Content Security Policy (CSP) configuration and the use of the
Sec-Fetch-Siteheader for CSRF protection inreferences/controllers.md.
Audit Metadata