rails-expert

Pass

Audited by Gen Agent Trust Hub on Aug 27, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides a comprehensive reference for Ruby on Rails development, covering Active Record, Hotwire, Sidekiq, and RSpec testing. The instructions align with industry-standard best practices.
  • [COMMAND_EXECUTION]: The core workflow and reference guides describe the use of standard development tools such as rails generate, bundle exec rspec, and rails db:migrate. These commands are executed within a standard developer environment for legitimate project scaffolding and testing.
  • [EXTERNAL_DOWNLOADS]: The skill mentions common, well-known Ruby gems including sidekiq, rspec-rails, jwt, rack-attack, and factory_bot_rails. These are trusted libraries in the Ruby ecosystem and are appropriate for the skill's stated purpose.
  • [CREDENTIALS_UNSAFE]: The code examples demonstrate secure secret management, specifically using Rails.application.credentials.secret_key_base for JWT token encoding rather than hardcoding sensitive values.
  • [INDIRECT_PROMPT_INJECTION]: The skill addresses potential injection risks by mandating the use of strong parameters in controllers and sanitize_sql for database queries, ensuring that user-controlled data is handled safely.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 27, 2026, 11:50 AM
Security Audit — agent-trust-hub — rails-expert