The Agent Skills Directory

[SAFE]: The skill serves as a security-focused guide for Rails developers. It recommends hardened configurations for Devise, such as increasing password length to 12 characters, setting bcrypt cost factor to 12, and using peppers stored in secure credentials instead of hardcoding them.
[SAFE]: The skill provides defensive coding patterns to prevent common vulnerabilities. Specifically, it warns against open redirects by advising against trusting user-supplied redirect parameters and demonstrates how to use Pundit's policy_scope to prevent accidental data exposure in index actions.
[SAFE]: External dependencies referenced (Devise, Rodauth, Pundit, Clearance, CanCanCan) are standard, well-maintained libraries in the Ruby ecosystem. The URLs provided point to official documentation and reputable source code repositories.
[SAFE]: No malicious patterns such as prompt injection, data exfiltration, or obfuscation were detected. The instructions prioritize security-first defaults and developer oversight (e.g., using verify_authorized after_actions).

devise-pundit-rodauth