form-helpers
Pass
Audited by Gen Agent Trust Hub on May 1, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides legitimate guidance for Rails 8 development. All suggested patterns, such as
form_with, strong parameters usingparams.expect, and CSRF protection management, align with official Rails documentation and security best practices. - [COMMAND_EXECUTION]: The skill uses
rg(Grep) and specific Rails CLI commands (bin/rails,bundle exec rails) to inspect the codebase and manage the application. These tools are scoped to the project environment and are used for their intended purpose of discovering existing code patterns. - [DATA_EXPOSURE_EXFILTRATION]: No evidence of hardcoded credentials, sensitive file access, or unauthorized network operations was found. Instructions regarding external URLs correctly advise on handling CSRF tokens for third-party webhooks.
- [PROMPT_INJECTION]: The instructions do not contain any attempts to override agent safety guidelines or system prompts. The 'One Rule' specified is a technical constraint for code consistency, not a behavioral bypass.
Audit Metadata