uuid-primary-keys
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides standard Ruby and Rails implementation patterns for UUID management. Code snippets utilize secure built-in libraries like
SecureRandomandDigestfor generating and manipulating identifiers. - [COMMAND_EXECUTION]: The skill utilizes restricted Bash tools for Rails-specific tasks such as
rails generate migrationandrails db:migrate. These operations are limited to the intended scope of managing a Rails project's database schema and do not involve arbitrary command execution. - [INDIRECT_PROMPT_INJECTION]: The skill interacts with local project files to assess and modify the database configuration. While this represents a standard attack surface for developer tools, no malicious patterns were observed.
- Ingestion points: Reads project configuration, migration files, and schema definitions using
Read,Grep, andGlobtools. - Boundary markers: None explicitly implemented in the provided code templates, which is typical for instructional snippets.
- Capability inventory: Includes file modification (
Write,Edit) and execution of restricted Rails CLI commands (Bash). - Sanitization: The skill provides code templates that rely on standard Rails security practices and does not interpolate untrusted external data into sensitive execution paths.
Audit Metadata