rails-design-system
Pass
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: SAFE
Full Analysis
- COMMAND_EXECUTION (SAFE): The skill suggests using standard shell commands like
grep,wc, andsortin the auditing section (org-deduplication-audit.md). These are used for identifying code duplication and are appropriate for the skill's purpose. - EXTERNAL_DOWNLOADS (SAFE): The skill references well-known and trusted libraries in the Ruby on Rails ecosystem, including
ViewComponent,Turbo,Stimulus, andPhlex. It recommends standard package management tools likeimportmap-railsandyarnfor installation. - DATA_EXFILTRATION (SAFE): The skill includes examples for reading local SVG files and YAML configuration files. These patterns are standard Rails conventions for handling assets and design tokens and do not involve unauthorized data access or external transmission of sensitive info.
- PROMPT_INJECTION (SAFE): The skill uses instructional language to guide the agent in code generation and refactoring. No attempts to override safety filters or bypass system instructions were identified.
Audit Metadata