Rails

Build Rails applications with proper conventions, performance patterns, and security practices.

This skill is documentation-only and appears coherent with its stated goal of Rails best practices. It requires the 'rails' binary to be present locally — make sure that binary comes from your trusted Ruby/Rails installation. Because there is no install step and no requested secrets, the risk surface is small. As a general precaution: review the skill text before use, avoid granting new credentials or enabling installs from unknown sources, and be cautious if a future version adds install scripts, external URLs, or environment-variable requirements (those would require fresh review).

Type: OpenClaw Skill Name: rails Version: 1.0.1 The skill bundle consists entirely of markdown documentation detailing common pitfalls and best practices in Rails development, including security vulnerabilities. While `security.md` discusses critical vulnerabilities like SQL injection, arbitrary method calls, and RCE via `YAML.load`, it presents them as educational examples of 'traps' to avoid, explicitly advising against their use and recommending secure alternatives. There is no executable code, no instructions for the AI agent to perform malicious actions, exfiltrate data, or engage in prompt injection. The `SKILL.md` metadata merely declares a dependency on the `rails` binary, which is a capability, not a command to execute maliciously.