Rails Audit Skill

Perform comprehensive technical reviews of Ruby on Rails applications. Runs automated analysis tools (RubyCritic, Brakeman, bundler-audit, Gitleaks, Debride, linters, SimpleCov, Rails stats, Rails ERD), analyzes code for architecture, security, authorization (Pundit/CanCanCan), dead code, and design issues, and produces a structured markdown report with prioritized findings and a 0-10 score. Use when the user requests a tech review, code audit, project assessment, or quality analysis of a Rails application.

16 starsSoftware Development

Install

skills CLI (Claude Code, Cursor, Codex and more)

npx skills add rubyroidlabs/rails-audit-skill --skill rails-audit-skill

Manual install

git clone --depth 1 https://github.com/rubyroidlabs/rails-audit-skill.git /tmp/rails-audit-skill
mkdir -p ~/.claude/skills
cp -r /tmp/rails-audit-skill/. ~/.claude/skills/rails-audit-skill

Personal skills live in ~/.claude/skills. Use .claude/skills in a project folder to share a skill with your team.

From the SKILL.md

# Rails Tech Review Skill

Perform comprehensive technical reviews of Ruby on Rails applications. This skill runs automated analysis tools, inspects source code manually, and produces a structured audit report with prioritized findings.

## Audit Scope

The audit can be run in two modes:
1. **Full Application Audit**: Analyze entire Rails application (default)
2. **Targeted Audit**: Analyze specific files or directories

## Execution Flow

### Phase 1: Project Discovery

1. **Verify this is a Rails project.** Check for `config/application.rb`, `Gemfile`, and `app/` directory. If none of these exist, immediately abort and tell the user: "This does not appear to be a Ruby on Rails project. This skill only supports Rails applications."
2. Extract key metadata:
   - Ruby version (from `.ruby-version`, `Gemfile.lock`, or `.tool-versions`)
   - Rails version (from `Gemfile.lock` — look for `rails (` entry)
   - Database adapter (from `config/database.yml` or `Gemfile.lock`)
   - Background job framework (check Gemfile for Sidekiq, GoodJob, DelayedJob, Resque)
   - Frontend setup (check `package.json`, `app/javascript/`, `app/assets/`)
   - CI/CD (check `.github/workflows/`, `.gitlab-ci.yml`, `Jenkinsfile`)
   - Test framework (check for `spec/` directory → RSpec, `test/` directory → Minitest)
   - Infrastructure signals (check for `Procfile`, `Dockerfile`, `docker-compose.yml`, `app.json`)
3. Attempt `bundle install` to verify dependencies resolve. Note any failures.

Read the full skill on GitHub

Details

Skill name: rails-audit-skill
Repository: rubyroidlabs/rails-audit-skill
License: MIT
Repo updated: 12 August 2026

FAQ

What does the Rails Audit Skill skill do?

How do I install the Rails Audit Skill skill?

skills CLI (Claude Code, Cursor, Codex and more): npx skills add rubyroidlabs/rails-audit-skill --skill rails-audit-skill. Skills go in ~/.claude/skills (personal) or .claude/skills (project), and Claude loads them automatically when a task matches the description.

Is Rails Audit Skill popular?

It lives in rubyroidlabs/rails-audit-skill, which has 16 GitHub stars and 0 forks.

Related skills

App Store Kit

allexp1/app-store-kit

Takes an iOS/iPadOS app from code to the App Store and keeps it updated, hands-off. It checks the code against Apple's current review rules, writes the product page in every language the owner wants, makes screenshots per language and device, archives and uploads the build, and fills App Store Connect itself through the official API (texts, languages, screenshots, age rating, accessibility, review details, build, submit, release), using Chrome only where the API can't reach. It works step by step and stops for the person only where Apple requires them (sign-in, agreements, tax, banking, DSA):

Software Development

Nx Matting

xiaowu89/skill-matting

使用本地 BiRefNet GGUF 模型完成图片或视频抠图、人物抠图、主体分割和背景移除，并输出透明 PNG、MOV 或 WebM。适用于用户提到图片抠图、照片去背景、人像透明图、视频抠图、透明视频、BiRefNet、JPG/PNG/BMP/WebP 图片，或 MP4/MOV/WebM 视频的场景；无需 Python、PyTorch 或 CUDA。

Software Development

Charles Proxy Extract

wannabehero/charles-proxy-extract-skill

Extracts HTTP/HTTPS request and response data from Charles Proxy session files (.chlsj format), including URLs, methods, status codes, headers, request bodies, and response bodies. Use when analyzing captured network traffic from Charles Proxy debug sessions, inspecting API calls, debugging HTTP requests, or examining proxy logs.

Software DevelopmentIn 1 list

Si Coder

rahmanef63/si-coder-agent

SI-Coder umbrella skill. Build, improve, and publish web apps from plain-language goals for non-technical users. Route through sc, sc-build, sc-fe, sc-all, sc-provider, or focused UI/UX/DX/AX/provider skills while keeping technical choices and secrets behind a safe abstraction layer.

Software Development

Claris Filemaker Pro

CadenceUX/claris-filemaker-pro-skill

FileMaker Pro reference for calculation functions, script steps, field types and error codes: exact syntax, parameters, return types, the release that introduced each, and which script steps work in FileMaker Go, WebDirect, Server, Cloud, the Data API and Custom Web Publishing. Also covers the FileMaker Data API, OData, ExecuteSQL and FileMaker SQL, and WebDirect and FileMaker Go limits. Use whenever a FileMaker function or script step is named, written, reviewed or debugged, including inside a calculation, a script or other code, or when asked whether something works on a given FileMaker clie

Software Development

History

ay-bh/chat-history

Search, inspect, and export Claude Code, Cursor, and Codex conversation history. Use when the user asks about past conversations, wants to find a previous session, needs to search chat history, wants a summary of what they worked on, or asks to resume a session. Also use when the user says "what did I work on", "find that conversation where I...", "show me my recent sessions", or "search my history for...".

Software Development

Browse the most popular Claude skills, all software development skills, or write your own with the skills generator.