kafka-rails
Pass
Audited by Gen Agent Trust Hub on Sep 8, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides standard implementation patterns for Apache Kafka in a Rails environment. It correctly emphasizes the use of environment variables for broker configuration and promotes the outbox pattern for transactional consistency, which is a security and reliability best practice.
- [INDIRECT_PROMPT_INJECTION]: The skill describes patterns for consuming events from a Kafka topic, creating a data ingestion surface. While standard for event-driven architectures, this introduces a surface where data from an external message queue is processed by the application.
- Ingestion points:
OrderEventsConsumerinSKILL.mdhandles messages from Kafka topics. - Boundary markers: None used in the code examples.
- Capability inventory: The logic includes database writes (
ProcessedEvent.create!) and transactional operations. - Sanitization: Not explicitly shown in the handling logic for parsed message payloads.
Audit Metadata