polymorphic-parent-resources
Pass
Audited by Gen Agent Trust Hub on Aug 7, 2026
Risk Level: SAFE
Full Analysis
- [DYNAMIC_EXECUTION]: The skill demonstrates using
safe_constantizeto dynamically resolve model classes. It provides a specific security pattern (allowlisting) to prevent unauthorized constant resolution from user-supplied input.- [COMMAND_EXECUTION]: Auditing instructions include standard shell commands likefindandgrepfor codebase refactoring. These are used locally and do not involve risky network or privilege operations.- [INDIRECT_PROMPT_INJECTION]: The skill addresses the risk of untrusted data entering the system via parameters. Ingestion points include model type parameters in the controller. The capability inventory includes dynamic record lookup. Sanitization is provided via a recommended allowlisting pattern for user-supplied types. Boundary markers are implemented using Rails route defaults which prevent parameter overrides.
Audit Metadata