Dhh Rails Style

• Outcome: Pass
• Latest audit: May 29, 2026 at 8:14 PM UTC
• Version:
  0.1.0

Overview

This is a documentation-only Rails style guide with broad activation but no executable behavior or hidden access.

Reasonable to install if you want DHH/37signals-style Rails guidance. Be aware it may activate for broad Ruby/Rails tasks, and treat its authentication, authorization, deletion, and caching snippets as examples that still need normal engineering and security review before applying to production code.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

• Confidence: 91% confidence
• Finding: The skill's activation scope is very broad, covering essentially any Ruby or Rails coding, refactoring, review, or even mention of DHH/37signals-related terms. In an agent system, this can cause the skill to trigger in many contexts where it was not specifically requested, increasing the chance that its embedded architectural preferences override user intent or influence unrelated tasks.

VirusTotal

66/66 vendors flagged this skill as clean.