rails-security-baseline

rails-security-baseline is an Application security skill for AI agents, published by sandeepmvl in the rails-skills repository on GitHub. Skillspace rates rails-security-baseline C (72/100) and the safety scan flagged it for review; the rating is based on static analysis only.

Flagged for review. Read the source before running it.

Security baseline for Ruby on Rails 8 apps — strong params (and their common bypass mistakes), CSRF for browser apps, CSRF for SPAs, Brakeman + bundler-audit + Dependabot, Rails credentials per environment, JWT best practices (short-lived + refresh rotation, never put secrets in payload), CORS without wildcards, Rack::Attack for rate limiting and brute-force, OWASP Top 10 mapped to Rails. Use when reviewing or writing any controller, when the user mentions security, CSRF, params, mass assignment, secrets, credentials, JWT, CORS, Brakeman, bundler-audit, OWASP, secure headers, content security policy, or asks "is this safe to ship". Use proactively before any commit that touches auth, params, or external input.

Grade

C

Quality

72 / 100

Safety

Needs review

GitHub stars

21

Unproven: rated by static analysis only, not yet compared head-to-head.

This rating describes the version of the repository we crawled; it may have changed since, so go by its current files.

Skillspace indexes and rates this skill; it does not host or endorse it. Run third-party skills at your own risk.