The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill recommends installing well-known security tools and dependencies such as brakeman, bundler-audit, and snyk. It also references official GitHub Actions from trusted organizations like actions/checkout and ruby/setup-ruby for CI/CD integration.
[COMMAND_EXECUTION]: The documentation provides numerous shell commands for the user or agent to run security scans and audits (e.g., bundle exec brakeman, snyk test, grep for secrets). These commands are standard for the described security auditing purpose.
[SAFE]: The skill exclusively contains educational content, configuration templates, and best practice guidelines. The examples of vulnerable code are clearly labeled as 'Bad' to demonstrate security risks like SQL injection and XSS for remediation purposes. No obfuscation, persistence mechanisms, or data exfiltration patterns were found.

rails-security-audits