ruby-lsp
Pass
Audited by Gen Agent Trust Hub on Nov 3, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to run the
ruby-lspcommand-line utility viarun_commandfor diagnostics and syntax verification. This is standard behavior for language server integration. - [INDIRECT_PROMPT_INJECTION]: The skill's core purpose of analyzing source code creates a vulnerability surface for indirect prompt injection attacks.
- Ingestion points: The agent is instructed to read content from files with
.rb,.rake,.gemspec,.ru, and.erbextensions. - Boundary markers: No specific delimiters or instructions to ignore embedded natural language commands within the source files are provided in the skill body.
- Capability inventory: The skill grants the agent the capability to execute command-line diagnostics and trace symbols using the
ruby-lsptool. - Sanitization: There is no evidence of sanitization, filtering, or validation performed on the source code content before it is processed by the agent.
Audit Metadata