rails-security-baseline
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill acts as an educational and defensive guide for Rails developers, providing patterns to improve security and naming common mistakes to avoid.\n- [EXTERNAL_DOWNLOADS]: The skill references established security tools like Brakeman and bundler-audit, and utilizes official GitHub Actions from trusted organizations (actions and ruby) for automated security checks. These are standard development resources.\n- [COMMAND_EXECUTION]: Instructions describe how to incorporate security analysis tools into CI/CD workflows, facilitating proactive detection of vulnerabilities in the codebase and dependencies.\n- [INDIRECT_PROMPT_INJECTION]: The skill correctly identifies risks associated with user-supplied data, such as URLs and parameters, and provides detailed implementation examples for robust validation and sanitization to prevent SSRF and mass assignment attacks.
Audit Metadata