active-storage-setup

Pass

Audited by Gen Agent Trust Hub on Sep 14, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [SAFE]: The skill configures file storage using Rails' built-in Active Storage mechanism. Configuration examples in config/storage.yml follow best practices by referencing Rails.application.credentials instead of hardcoding sensitive API keys or secrets.
  • [SAFE]: The skill references reputable and standard Ruby gems (image_processing and active_storage_validations) that are widely used and recommended by the official Rails documentation for handling image transformations and file constraints.
  • [INDIRECT_PROMPT_INJECTION]: The skill establishes a data ingestion surface through file upload forms. It addresses this risk by providing specific validation examples in references/validations.md, ensuring that uploaded files are checked for both size and MIME type before processing. Ingestion points are located in app/views/users/_form.html.erb and app/views/events/_form.html.erb via f.file_field. Capabilities include writing to the local file system or cloud providers (AWS/GCS) based on the config/storage.yml setup. Sanitization is implemented through content type and byte size validations.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 14, 2026, 03:35 PM