kafka-rails

Pass

Audited by Gen Agent Trust Hub on Sep 8, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [SAFE]: The skill provides standard implementation patterns for Apache Kafka in a Rails environment. It correctly emphasizes the use of environment variables for broker configuration and promotes the outbox pattern for transactional consistency, which is a security and reliability best practice.
  • [INDIRECT_PROMPT_INJECTION]: The skill describes patterns for consuming events from a Kafka topic, creating a data ingestion surface. While standard for event-driven architectures, this introduces a surface where data from an external message queue is processed by the application.
  • Ingestion points: OrderEventsConsumer in SKILL.md handles messages from Kafka topics.
  • Boundary markers: None used in the code examples.
  • Capability inventory: The logic includes database writes (ProcessedEvent.create!) and transactional operations.
  • Sanitization: Not explicitly shown in the handling logic for parsed message payloads.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 8, 2026, 03:48 AM
Security Audit — agent-trust-hub — kafka-rails