Identify and remediate security vulnerabilities in Rails 8 applications.
npx skills add https://github.com/pelletencate/iron-horse --skill security-pelletencate
Please help me install this Agent Skill. Skill: security Source: https://github.com/pelletencate/iron-horse/tree/main/skills/security Command: npx skills add https://github.com/pelletencate/iron-horse --skill security-pelletencate
Rails apps often face security risks including XSS, SQL injection, CSRF, insecure file uploads, and misconfigurations. This skill provides structured guidance to identify and remediate these vulnerabilities to reduce risk and protect users.
Review a Rails codebase to identify and fix common security vulnerabilities in controllers, models, and views.
High-intent search queries and answers about installing and using this skill.
To fix XSS vulnerabilities in a Rails application, review controllers and views to enforce output encoding and input sanitization. This skill guides defense-in-depth strategies including CSP headers and secure defaults to protect user input.
Securing file uploads in Rails 8 requires implementing safe storage and strict input validation. This skill provides structured guidance to audit file handling processes and harden your application against insecure upload risks.
Auditing Rails API endpoints for CSRF and SQL injection involves enforcing parameterized queries and robust authentication checks. This skill helps identify these security gaps and apply defense-in-depth remediation patterns.
The security guidance specifically targets Rails 8 apps handling user input, file uploads, and API endpoints. While the defense-in-depth principles are broadly applicable, the implementation details are tailored for Rails 8 secure defaults.
Defense-in-depth for input validation is needed in Rails to layer security controls like output encoding, CSP headers, and parameterized queries. This approach prevents single points of failure when handling user input and securing API endpoints.
Automated security checks for Rails misconfigurations focus on identifying common vulnerabilities like insecure file uploads and weak authentication, but require manual implementation of secure defaults and safe storage to fully remediate risks.
bostonaholicCodify Rails coding conventions for project structure and code quality.
augustoheissIdentify and remediate application security risks in web and cloud-native systems.
zmreImplement authentication and authorization patterns for REST/GraphQL APIs with JWT and OAuth2.
AgentSecOpsAutomate OWASP ZAP dynamic security scans for web applications and APIs.
