layouts-and-rendering
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a comprehensive reference for Ruby on Rails view rendering best practices. It explicitly includes security guidance, warning against path traversal vulnerabilities when using render file: with untrusted input and discouraging the use of render inline:.
- [DYNAMIC_EXECUTION]: The skill documents Rails features that involve dynamic template and file rendering (e.g., render file:, render inline:). The documentation correctly identifies security risks associated with these features and provides clear instructions on how to avoid vulnerabilities like path traversal by not using user input in file paths.
Audit Metadata