skill-rails-upgrade
Pass
Audited by Gen Agent Trust Hub on Feb 28, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill executes standard development commands to inspect the local project and perform upgrade tasks. This includes using the GitHub CLI (
gh api) to retrieve version tags,npmorbin/importmapto manage JavaScript dependencies, and local Rails binaries (bin/rails,bin/dev) for migrations and environment verification. These operations are restricted to the local project context and are necessary for the skill's primary function. - [EXTERNAL_DOWNLOADS]: The skill retrieves upgrade documentation and configuration diffs from external domains. It fetches release metadata from GitHub, official upgrade guides from
guides.rubyonrails.org, and version-specific code differences fromrailsdiff.org. These sources are well-known and authoritative within the Ruby on Rails development ecosystem, and the data retrieved is used strictly for informational and template generation purposes.
Audit Metadata