CtrlK
BlogDocsLog inGet started
Tessl Logo

igmarin/rails-agent-skills

Curated library of 42 public AI agent skills for Ruby on Rails development, plus 5 callable workflow skills. Organized by category: planning, testing, code-quality, ddd, engines, infrastructure, api, patterns, context, orchestration, and workflows. Covers code review, architecture, security, testing (RSpec), engines, service objects, DDD patterns, and TDD automation.

96

Quality

96%

Does it follow best practices?

Impact

—

No eval scenarios have been run

SecuritybySnyk

Risky

Do not use without reviewing

Overview
Quality
Evals
Security
Files

PITFALLS.mdskills/code-quality/security-check/

Rails Security Review — Pitfalls

PitfallReality
"Only internal users access this"Internal tools get compromised — apply the same standards
permit! "just for now"It will ship. Whitelist from day one
"Rails handles CSRF automatically"Only if protect_from_forgery is active and tokens are verified
String interpolation in SQLSQL injection — always use parameterized queries
html_safe on user contentXSS — only call on developer-controlled strings
Secrets in committed filesUse encrypted credentials. Rotate immediately if exposed
No authorization before destructive actionsAlways check permissions, even for internal routes
Background job inputs not validatedJobs are entry points — validate inputs like a controller

skills

code-quality

security-check

PITFALLS.md

SKILL.md

README.md

tile.json