kafka-rails
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides standard implementation patterns for Apache Kafka integration in Rails. It uses environment variables for configuration and relies on established community gems for functionality.
- [INDIRECT_PROMPT_INJECTION]: The consumer patterns described in the skill process data from Kafka topics, which is a common attack surface for indirect prompt injection. However, this is the intended functionality of the skill, and the examples provided follow standard development practices.
- Ingestion points:
OrderEventsConsumerinSKILL.mdprocesses message payloads from Kafka. - Boundary markers: None present in the code templates.
- Capability inventory: Database writes (
ProcessedEvent.create!,ApplicationRecord.transaction) and Kafka producing via Karafka. - Sanitization: Payload handling is shown as direct case-matching on keys, which is standard for internal event routing.
Audit Metadata