The Agent Skills Directory

[DYNAMIC_EXECUTION]: The skill generates a local bash script for code analysis. This script generation is handled by the agent using provided templates and pre-defined YAML patterns. The generated script uses standard local utilities like grep and find to identify breaking changes and does not include any remote execution or unsafe dynamic code loading.
[INDIRECT_PROMPT_INJECTION]: The skill contains logic to ingest and process a user's local Rails project files (such as Gemfile and environment configurations) to generate upgrade reports. While this introduces a potential ingestion surface for indirect prompt injection, the risk is mitigated by the skill's specific instructions for structured reporting and the intended use-case of developer-led application maintenance.
[COMMAND_EXECUTION]: The skill provides a development utility bin/build.sh intended for archiving the project. This script is a simple wrapper for the zip command and does not perform any unauthorized or dangerous system operations.
[EXTERNAL_DOWNLOADS]: The documentation and guides include numerous references to official Rails documentation and trusted GitHub repositories (e.g., github.com/rails/rails, github.com/maquina-app/*). These references are used solely for informational purposes and for locating necessary MCP tools.

rails-upgrade-assistant