The Agent Skills Directory

[SAFE]: The skill instructions and reference materials promote security best practices. For example, it explicitly warns against using line anchors (^ and $) in regular expressions, which can lead to injection vulnerabilities, and instead mandates string anchors (\A and \z).
[SAFE]: The skill emphasizes defense-in-depth by requiring model-layer validations to be backed by database-level constraints (like unique indexes and null constraints) to prevent race conditions and data corruption.
[SAFE]: Tool usage is restricted to standard Rails development commands (bin/rails, bundle exec) which are appropriate for the stated purpose of guiding a developer through Active Record validation tasks.
[SAFE]: No obfuscation, hardcoded credentials, or unauthorized network operations were found in the skill body or the associated reference files.
[INDIRECT_PROMPT_INJECTION]: As a developer-focused skill that processes user requirements to generate Rails code, there is an inherent ingestion surface. However, the skill provides clear boundaries and specific structural guidance that reduces the risk of accidental instruction following from processed data. Severity: LOW.

active-record-validations