inertia-rails-best-practices
Pass
Audited by Gen Agent Trust Hub on Feb 15, 2026
Risk Level: LOWCOMMAND_EXECUTION
Full Analysis
- COMMAND_EXECUTION (LOW): The
scripts/setup.shscript executesbundle addandbin/rails generate. While this involves shell execution, it is consistent with the skill's stated purpose of automating project setup and targets local developer tools rather than untrusted remote sources. - DATA_EXFILTRATION (SAFE): No network operations or sensitive file access patterns were found in the scripts or documentation.
- PROMPT_INJECTION (SAFE): The skill provides structural guidance and rules for development without attempting to override the agent's core safety instructions.
- REMOTE_CODE_EXECUTION (SAFE): No patterns for downloading and piping remote scripts to a shell were identified. The
setup.shscript is local to the skill package.
Audit Metadata