rails-action-cable
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides standard documentation and code examples for implementing WebSockets using the Ruby on Rails framework.
- [SAFE]: Authentication and authorization patterns follow established Rails security practices, including the use of connection identifiers and connection rejection for unauthorized users.
- [SAFE]: Client-side JavaScript examples explicitly include XSS protection routines (e.g.,
escapeHtml) when rendering user-supplied content, demonstrating a focus on secure development. - [SAFE]: Configuration files and connection examples use standard placeholders or local loopback addresses (e.g.,
redis://localhost:6379/1), avoiding the exposure of real credentials or sensitive infrastructure details.
Audit Metadata