ruby-idioms

Pass

Audited by Gen Agent Trust Hub on Apr 17, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill is primarily documentation and reference material for Ruby development. It explicitly promotes secure coding practices, such as avoiding the use of eval with user input and recommending YAML.safe_load for parsing external data.
  • [COMMAND_EXECUTION]: The troubleshooting guide (references/troubleshooting.md) includes examples of shell commands like ps and tail used for legitimate diagnostic purposes such as memory monitoring and log analysis. These are documented as standard practices for developers managing Ruby applications.
  • [CREDENTIALS_UNSAFE]: The skill demonstrates secure configuration practices by using environment variables (e.g., ENV['STRIPE_API_KEY']) in code examples rather than hardcoding sensitive credentials.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 17, 2026, 04:37 AM
Security Audit — agent-trust-hub — ruby-idioms