Rails Audit Thoughtbot
Analyzes Ruby on Rails code for Thoughtbot best practices, identifying potential improvements and security vulnerabilities.
Install on your platform
We auto-selected Claude Code based on this skill’s supported platforms.
Run in terminal (recommended)
claude mcp add rails-audit-thoughtbot npx -- -y @trustedskills/rails-audit-thoughtbot
Or manually add to ~/.claude/settings.json
{
"mcpServers": {
"rails-audit-thoughtbot": {
"command": "npx",
"args": [
"-y",
"@trustedskills/rails-audit-thoughtbot"
]
}
}
}Requires Claude Code (claude CLI). Run claude --version to verify your install.
About This Skill
What it does
This skill provides auditing capabilities for Rails applications. It automatically records changes to models, allowing you to track who made what modifications and when. This is particularly useful for debugging data integrity issues or ensuring compliance with regulatory requirements.
When to use it
- Debugging Data Issues: Investigate unexpected data changes by reviewing the audit trail of affected records.
- Compliance Auditing: Generate reports demonstrating adherence to data modification policies.
- Tracking Sensitive Changes: Monitor modifications to critical models like user accounts or financial transactions.
- Identifying Unauthorized Access: Detect and investigate suspicious activity based on audit logs.
Key capabilities
- Automatic tracking of model changes
- Recording of user information for each change
- Timestamped records of modifications
Example prompts
- "Show me all changes to the 'User' model made by user 'admin'."
- "Generate an audit report for the 'Product' model from yesterday."
- "List all modifications to the 'Order' model where the total amount was changed."
Tips & gotchas
This skill requires a Rails application and may necessitate configuration within your config/application.rb file. Ensure that auditing is enabled in your environment for accurate tracking of changes.
Tags
TrustedSkills Verification
Unlike other registries that point to live repositories, TrustedSkills pins every skill to a verified commit hash. This protects you from malicious updates — what you install today is exactly what was reviewed and verified.
Security Audits
| Gen Agent Trust Hub | Pass |
| Socket | Pass |
| Snyk | Pass |
🌐 Community
Passed automated security scans.