skill-rails-upgrade
Pass
Audited by Gen Agent Trust Hub on Nov 6, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches version metadata and release tags from the official Ruby on Rails GitHub repository using the GitHub CLI (
gh). - [EXTERNAL_DOWNLOADS]: It retrieves upgrade instructions from the official Ruby on Rails guides and file differences from
railsdiff.org, which are established resources for the described task. - [COMMAND_EXECUTION]: The skill executes standard development tools including the GitHub CLI,
npm, and local Rails binaries (bin/rails,bin/dev) to analyze dependencies and run database migrations. - [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted content from external documentation sites and version diffs to generate upgrade plans. To mitigate potential risks, the instructions mandate that the agent presents a plan for user confirmation and performs manual merges rather than automatic overwrites.
Audit Metadata