skills.rest
slbug
slbugCOMMUNITY
Explore all skills by this author →
GitHub

rb:audit

Audit Ruby/Rails/Grape codebases for architecture, security, performance, testing, and operational risks.

7|Updated Mar 22, 2026
Search Tags:#testing#architecture#security#audit#ruby#rails#grape
One-click install
npx skills add https://github.com/slbug/claude-ruby-grape-rails --skill rb-audit
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: rb:audit
Source: https://github.com/slbug/claude-ruby-grape-rails/tree/main/plugins/ruby-grape-rails/skills/audit
Command: npx skills add https://github.com/slbug/claude-ruby-grape-rails --skill rb-audit

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

Provides a single, structured assessment for Ruby/Rails/Grape repositories that identifies architecture, security, performance, testing, and operational risks which are often missed by unit tests or ad hoc reviews.

Core Features & Use Cases

  • Architecture Analysis: Evaluate service boundaries, coupling, cohesion, and directory organization to surface boundary violations and "god" services.
  • Security & Authorization Checks: Highlight authorization gaps, dangerous patterns, and recommended use of scanners and secure coding practices.
  • Performance & Query Quality: Detect N+1 risks, missing preloads, and index-related issues and offer remediation guidance.
  • Test Quality & Flake Risk: Assess coverage, flaky patterns, and test configuration to ensure reliable CI feedback.
  • Scoring & Remediation: Produce weighted scores across categories with concrete deductions and an overall grade to prioritize fixes.
  • Use Case: Run a full repository health assessment before a major release or architecture refactor to surface high-impact risks and an action plan.

Quick Start

Run the rb:audit skill at the repository root to generate a scored, multi-category audit and actionable remediation guidance.

Frequently Asked Questions about rb:audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit a Rails codebase for architecture and security risks?▼

Run a full repository health assessment at the root to audit Rails architecture and security risks, using static analysis heuristics and tools like Brakeman and bundle-audit to produce scored, category-level reports with remediation guidance.

What does a Ruby Grape API codebase health audit include?▼

A Ruby Grape API codebase health audit includes analysis of API organization, service boundary violations, N+1 query risks, test coverage quality, and deployment readiness, generating a weighted score across categories with an overall grade and remediation guidance.

Can I check Grape API service boundaries and coupling issues?▼

Yes, you can check Grape API service boundaries and coupling issues by evaluating directory organization, cohesion, and boundary violations to surface architectural risks like god services, providing concrete deductions and actionable fixes in a scored report.

What's the best way to detect N+1 queries and performance risks in Ruby?▼

Run a project-wide audit using static analysis heuristics to detect N+1 query risks and missing preloads in Ruby, generating a scored performance category report with concrete remediation guidance.

Does the Ruby project audit work with standard tools like RuboCop and Brakeman?▼

Yes, the Ruby project audit works with standard tools like RuboCop, Brakeman, and bundle-audit, leveraging repository metric commands and static analysis heuristics to assess code quality, security vulnerabilities, and operational risks across the entire codebase.

When should I run a full repository health assessment for Rails?▼

Run a full repository health assessment for Rails before a major release or architecture refactor to surface high-impact operational, testing, and security risks, ensuring reliable CI feedback and generating a prioritized action plan for fixes.

Related Skills

Explore More Software Engineering Skills→
slbugslbug
7

rb:secrets

Detect leaked secrets and exposed credentials in Ruby codebases.

Community
Intermediate
mikecubedmikecubed

perf-check

Detect N+1 queries, unbounded loops, and missing pagination in code reviews.

Community
Intermediate
baphledbaphled
1

check-compliance

Run linting, formatting, security scans, and tests before committing code.

Community
Intermediate
686f6c61686f6c61
105

profiling

Profile CPU and memory usage to identify performance bottlenecks.

Community
Advanced