active-storage-setup
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill configures file storage using Rails' built-in Active Storage mechanism. Configuration examples in
config/storage.ymlfollow best practices by referencingRails.application.credentialsinstead of hardcoding sensitive API keys or secrets. - [SAFE]: The skill references reputable and standard Ruby gems (
image_processingandactive_storage_validations) that are widely used and recommended by the official Rails documentation for handling image transformations and file constraints. - [INDIRECT_PROMPT_INJECTION]: The skill establishes a data ingestion surface through file upload forms. It addresses this risk by providing specific validation examples in
references/validations.md, ensuring that uploaded files are checked for both size and MIME type before processing. Ingestion points are located inapp/views/users/_form.html.erbandapp/views/events/_form.html.erbviaf.file_field. Capabilities include writing to the local file system or cloud providers (AWS/GCS) based on theconfig/storage.ymlsetup. Sanitization is implemented through content type and byte size validations.
Audit Metadata