rails-api-design
Pass
Audited by Gen Agent Trust Hub on Sep 8, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill describes building API endpoints that process untrusted external data. Ingestion points: Data enters through API request parameters in
Api::V1::PostsController. Boundary markers: No explicit delimiters are included in response templates. Capability inventory: The skill facilitates database read/write and network communication. Sanitization: The patterns utilize Pundit for authorization and standard Rails input validation. - [EXTERNAL_DOWNLOADS]: Recommends installing industry-standard Ruby gems including
jsonapi-serializer,alba,pagy, andrack-attackfrom their official repositories. - [COMMAND_EXECUTION]: Mentions the standard Rails command
bin/rails rswag:specs:swaggerizefor generating API documentation.
Audit Metadata