CtrlK
BlogDocsLog inGet started
Tessl Logo

igmarin/rails-agent-skills

Curated library of 41 public AI agent skills for Ruby on Rails development. Organized by category: planning, testing, code-quality, ddd, engines, infrastructure, api, patterns, context, and orchestration. Covers code review, architecture, security, testing (RSpec), engines, service objects, DDD patterns, and TDD automation. Repository workflows remain documented in GitHub but are intentionally excluded from the Tessl tile.

95

1.77x
Quality

93%

Does it follow best practices?

Impact

96%

1.77x

Average score across 41 eval scenarios

SecuritybySnyk

Passed

No known issues

Overview
Quality
Evals
Security
Files

examples.mdskills/code-quality/code-review/assets/

code-review examples

Machine-readable finding (map severity to skill labels: Critical | Suggestion | Nice to have)

{
  "severity": "Critical",
  "file": "app/controllers/orders_controller.rb",
  "line": 120,
  "risk": "Unpermitted params used in create leading to mass-assignment of admin flag",
  "recommendation": "Use strong params and allowlist permitted attributes; add test to assert admin cannot be set via params",
  "proof_of_concept": "POST /orders with { order: { amount: 1, admin: true } } sets admin flag to true for new order"
}

PR comment shape (markdown, matches SKILL.md)

## Review — Add order totals

### Critical
- [app/controllers/orders_controller.rb:42] (Controllers) `permit!` on nested params. **Mitigation:** replace with explicit `.permit(:amount, :currency)`.

### Suggestion
- [app/models/order.rb:30] (Queries) N+1 loading line items in index. **Mitigation:** `includes(:line_items)` on the index scope.

### Nice to have
- [spec/requests/orders_spec.rb:12] (Tests) Describe block could name the unauthorized case. **Mitigation:** add a `context` for the missing-session case.

**Actions required:** Critical — block merge until fixed and re-reviewed. Suggestion — fix in this PR. Nice to have — optional.

Reviewer note examples

  • "Suggest moving business logic to OrderCreator service and adding request specs"
  • "Index on orders(user_id, status) would improve query performance for recent reports"

skills

code-quality

code-review

assets

checklist.md

examples.md

REVIEW_CHECKLIST.md

SKILL.md

README.md

server.json

tile.json