rails-security-baseline
Pass
Audited by Gen Agent Trust Hub on Sep 8, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues detected. The skill is designed to improve the security posture of Ruby on Rails applications by providing guidance on common vulnerabilities such as mass assignment, CSRF, and SSRF.
- [EXTERNAL_DOWNLOADS]: Recommends the use of industry-standard security tools and gems (Brakeman, bundler-audit, secure_headers, rack-attack) from well-known and reputable repositories.
- [PROMPT_INJECTION]: The instructions are instructional and pedagogical, focusing on guiding the agent to recognize and fix insecure code patterns without attempting to override the agent's core safety instructions.
- [DATA_EXFILTRATION]: Provides correct guidance for managing secrets using Rails' encrypted credentials system and environment variables, emphasizing the importance of not committing sensitive keys to version control.
- [INDIRECT_PROMPT_INJECTION]: While the skill involves the agent processing user-provided code, it mitigates risks by teaching the agent to enforce strong parameter allowlists and input sanitization.
Audit Metadata