action-text
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides instructions for implementing standard Rails Action Text features using established frameworks and the official Lexxy gem from a trusted organization (Basecamp).
- [SAFE]: Content security is properly addressed by emphasizing the use of Action Text's built-in safe-list sanitization. It includes explicit warnings about the XSS risks associated with extending tag allow-lists to include dangerous elements like iframes or scripts.
- [SAFE]: Performance best practices, specifically the prevention of N+1 queries through the use of preloading scopes (e.g., with_rich_text_content_and_embeds), are correctly implemented and recommended.
- [SAFE]: Command execution is limited to standard Rails environment management and gem installation through well-known services (RubyGems). The proposed operations are restricted to the necessary development workflow for rich text integration.
Audit Metadata