rails-security

Warn

Audited by Socket on Aug 30, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

BENIGN in intent and internally consistent: the commands, scope, and data flows match a Rails security audit skill, and there is no sign of credential harvesting or third-party interception. However, it remains HIGH security risk overall because it gives an AI agent offensive/security-review capability, reads untrusted code, and can execute local analysis commands through delegated subagents.

Confidence: 88%Severity: 74%
Audit Metadata
Analyzed At
Aug 30, 2026, 06:31 PM
Package URL
pkg:socket/skills-sh/scottwater%2Fskills%2Frails-security%2F@8ec6e0e853f2055fb91457f879e442fe0f640e828984f4b38412dc9a825b07aa
Security Audit — socket — rails-security