← All skills

rails-security-baseline

92 / 100 · Low risk

Fine to try. Some of what it can do is expected: a security skill usually runs scanners and checks websites.

By MadBomber/experiments (GitHub) · security · 11 stars · scanned at commit 8139ff6

Security baseline for Ruby on Rails 8 apps — strong params (and their common bypass mistakes), CSRF for browser apps, CSRF for SPAs, Brakeman + bundler-audit + Dependabot, Rails credentials per environment, JWT best practices (short-lived + refresh rotation, never put secrets in payload), CORS without wildcards, Rack::Attack for rate limiting and brute-force, OWASP Top 10 mapped to Rails. Use when reviewing or writing any controller, when the user mentions security, CSRF, params, mass assignmen…

Works with any agent that supports SKILL.md skills.

What this skill can do

Install

Paste this into your terminal. It downloads exactly the version we scanned, not whatever is newest.

if [ -e ~/.agents/skills/'rails-security-baseline' ] || [ -L ~/.agents/skills/'rails-security-baseline' ]; then echo 'A skill folder named rails-security-baseline already exists — not replacing it' >&2; false; else d=$(mktemp -d) && git clone --quiet --filter=blob:none --no-checkout 'https://github.com/MadBomber/experiments' "$d" && git -C "$d" checkout --quiet '8139ff68e8895b544661aa2ba8b53268d68652bc' -- 'ai_misc/skills/rails-skills/10-rails-security-baseline' && mkdir -p ~/.agents/skills && cp -R "$d"/'ai_misc/skills/rails-skills/10-rails-security-baseline' ~/.agents/skills/'rails-security-baseline' && rm -rf "$d"; fi

Codex reads ~/.agents/skills directly. For Claude Code, Cursor, Copilot, Gemini CLI, Antigravity or OpenCode, also link it. For Claude Code: ln -s ~/.agents/skills/'rails-security-baseline' ~/.claude/skills/'rails-security-baseline' (other agents: ~/.cursor/skills, ~/.copilot/skills, ~/.gemini/skills, ~/.gemini/config/skills, ~/.config/opencode/skills). Or install through the finder skill, which does both.

Badge for your README

The badge for MadBomber/experiments shows the score of its lowest-scoring skill.

[![SkillTrust](https://zalavijaysinh.github.io/skilltrust/badges/MadBomber/experiments.svg)](https://zalavijaysinh.github.io/skilltrust/repos/MadBomber/experiments/)

Score history