CtrlK
BlogDocsLog inGet started
Tessl Logo

igmarin/rails-agent-skills

Curated library of 39 AI agent skills for Ruby on Rails development. Organized by category: planning, testing, code-quality, ddd, engines, infrastructure, api, patterns, context, orchestration, and workflows. Includes 5 callable workflow skills (rails-tdd-loop, rails-review-flow, rails-setup-flow, rails-quality-flow, rails-engines-flow) for complete development cycles. Covers code review, architecture, security, testing (RSpec), engines, service objects, DDD patterns, and TDD automation.

95

1.20x
Quality

98%

Does it follow best practices?

Impact

95%

1.20x

Average score across 35 eval scenarios

SecuritybySnyk

Passed

No known issues

Overview
Quality
Evals
Security
Files

workflow.mdskills/code-quality/rails-authorization-policies/references/

Authorization Implementation Workflow

Step-by-step guide for implementing authorization in Rails applications.

Step 1: Add Gem

Add to Gemfile:

# For Pundit
gem 'pundit'

# For CanCanCan
gem 'cancancan'

Run:

bundle install

Step 2: Generate Policy/Ability

Pundit:

rails g pundit:install
rails g pundit:policy Post

CanCanCan:

rails g cancan:ability

Step 3: Define Permissions

Define authorization logic in the generated file. See EXAMPLES.md for complete code samples.

Step 4: Authorize in Controller

Add authorization calls to controller actions:

def update
  @post = Post.find(params[:id])
  authorize @post        # Pundit
  # or
  authorize! :update, @post  # CanCanCan
  # ...
end

Step 5: Write Tests

Create policy specs and request specs covering all roles. See EXAMPLES.md for testing patterns.

Step 6: Validate Coverage

Run all policy specs before deploying:

bundle exec rspec spec/policies

Ensure every role and edge case is explicitly covered.

skills

code-quality

rails-authorization-policies

README.md

tile.json