rails-search
Pass
Audited by Gen Agent Trust Hub on Sep 8, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides standard Ruby on Rails implementation patterns for search libraries (pg_search, Meilisearch, Searchkick). All referenced dependencies are well-known, established open-source projects from trusted organizations.
- [SAFE]: Secret management practices are followed by recommending environment variables (ENV.fetch) for API keys rather than hardcoding credentials.
- [SAFE]: The documentation explicitly warns against the misuse of
html_safefor user-generated content, demonstrating awareness of Cross-Site Scripting (XSS) risks when handling search result highlights. - [INDIRECT_PROMPT_INJECTION]: The skill inherently handles external data (search queries). It follows best practices by using parameterized ActiveRecord scopes and database-level functions, which mitigates common injection vectors.
Audit Metadata