active-storage-multitenant
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides secure coding patterns for implementing multitenancy in Rails Active Storage, specifically addressing Insecure Direct Object Reference (IDOR) vulnerabilities by signing tenant keys into blob identifiers.
- [SAFE]: Tool access is strictly scoped to standard Rails development tasks such as database migrations, testing, and storage management via
bin/railscommands. - [SAFE]: No obfuscation, prompt injection, persistence mechanisms, or unauthorized network operations were detected.
- [SAFE]: The code snippets utilize standard Rails security features, such as the
MessageVerifierfor signed identifiers.
Audit Metadata