rails-security-audit

To scan Rails code for vulnerabilities like SQL injection and XSS, this Skill analyzes your project directory using Read, Grep, and Glob tools. It detects mass assignment, IDOR, CSRF, and sensitive data exposure, reporting severity, location, and suggested fixes for each finding.

The best way to run a security audit on a Ruby on Rails application is using an automated scanner. This Skill analyzes your codebase to identify vulnerabilities like insecure deserialization and missing authentication, providing detailed reports with severity, location, and suggested fixes.

Yes, this Rails security audit detects mass assignment and IDOR vulnerabilities. It scans the codebase for these specific flaws alongside SQL injection, XSS, CSRF, open redirects, insecure deserialization, sensitive data exposure, missing authentication, and file upload vulnerabilities.

To find insecure deserialization and file upload vulnerabilities in a Rails app, this Skill scans your codebase for dangerous input handling. It locates these specific risks and reports the severity, exact location, description, and suggested fixes for each identified issue.

Yes, you can use this Skill to check for missing authentication and sensitive data exposure in Rails. It scans the codebase to identify these vulnerabilities and provides a detailed report including the severity, location, description, and suggested fixes for each detected issue.