Rails Audit Thoughtbot

🌐Community
by thoughtbot · vlatest · Repository

Analyzes Ruby on Rails code for Thoughtbot best practices, identifying potential improvements and security vulnerabilities.

Install on your platform

We auto-selected Claude Code based on this skill’s supported platforms.

1

Run in terminal (recommended)

terminal
claude mcp add rails-audit-thoughtbot npx -- -y @trustedskills/rails-audit-thoughtbot
2

Or manually add to ~/.claude/settings.json

~/.claude/settings.json
{
  "mcpServers": {
    "rails-audit-thoughtbot": {
      "command": "npx",
      "args": [
        "-y",
        "@trustedskills/rails-audit-thoughtbot"
      ]
    }
  }
}

Requires Claude Code (claude CLI). Run claude --version to verify your install.

About This Skill

What it does

This skill provides auditing capabilities for Rails applications. It automatically records changes to models, allowing you to track who made what modifications and when. This is particularly useful for debugging data integrity issues or ensuring compliance with regulatory requirements.

When to use it

  • Debugging Data Issues: Investigate unexpected data changes by reviewing the audit trail of affected records.
  • Compliance Auditing: Generate reports demonstrating adherence to data modification policies.
  • Tracking Sensitive Changes: Monitor modifications to critical models like user accounts or financial transactions.
  • Identifying Unauthorized Access: Detect and investigate suspicious activity based on audit logs.

Key capabilities

  • Automatic tracking of model changes
  • Recording of user information for each change
  • Timestamped records of modifications

Example prompts

  • "Show me all changes to the 'User' model made by user 'admin'."
  • "Generate an audit report for the 'Product' model from yesterday."
  • "List all modifications to the 'Order' model where the total amount was changed."

Tips & gotchas

This skill requires a Rails application and may necessitate configuration within your config/application.rb file. Ensure that auditing is enabled in your environment for accurate tracking of changes.

Tags

🛡️

TrustedSkills Verification

Unlike other registries that point to live repositories, TrustedSkills pins every skill to a verified commit hash. This protects you from malicious updates — what you install today is exactly what was reviewed and verified.

Security Audits

Gen Agent Trust HubPass
SocketPass
SnykPass

Details

Version
vlatest
License
Author
thoughtbot
Installs
6

🌐 Community

Passed automated security scans.