bundle-audit-ruby
Pass
Audited by Gen Agent Trust Hub on Aug 12, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: Executes shell commands to manage the auditing environment, including
gem install bundler-auditandbundle-audit check --update. - [EXTERNAL_DOWNLOADS]: Downloads the
bundler-auditgem from the RubyGems registry and clones theruby-advisory-dbfrom the RubySec GitHub organization. - [PROMPT_INJECTION]: Vulnerable to indirect prompt injection through the ingestion of external data.
- Ingestion points: Processes local
Gemfile.lockand.bundler-audit.ymlfiles, and remote YAML advisories fromruby-advisory-db. - Boundary markers: Absent; there are no delimiters separating external content from agent instructions.
- Capability inventory: Includes shell command execution and filesystem access.
- Sanitization: No sanitization or validation of the ingested file content is performed prior to processing.
Audit Metadata