asset-pipeline-propshaft
Pass
Audited by Gen Agent Trust Hub on Sep 8, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides standard documentation and patterns for Rails asset management.
- [EXTERNAL_DOWNLOADS]: The skill mentions fetching assets from reputable sources like
ga.jspm.io(a common CDN for ES modules) and official Rails repositories. These are well-known, trusted services in the developer community and do not pose a security risk in the context provided. - [COMMAND_EXECUTION]: Shell commands provided (e.g.,
rails new,grep,bin/importmap) are standard development utilities used for project initialization and code auditing. - [DATA_EXPOSURE]: The skill correctly advises against shipping sourcemaps to production to prevent exposure of unminified source code, demonstrating a security-conscious best practice.
Audit Metadata