What security vulnerabilities does it scan for?

It scans for OWASP Top 10 issues, including SQL injection, mass assignment, XSS, insecure authorization, and sensitive data exposure.

Why are service objects discouraged in this skill?

The skill follows a specific architectural philosophy that favors domain models, form objects, and POROs to keep logic closer to the data and improve long-term maintainability.

Can I run a review on a single pull request?

Yes, by providing a PR number or a diff, the skill can target its review specifically to the changed files rather than the entire codebase.

Does this skill support generic Ruby projects?

While it utilizes Ruby idioms, it is specifically optimized for Ruby on Rails applications and their unique directory structures and conventions.

Rails Architect & Code Auditor

Name: Rails Architect & Code Auditor
Author: julianrubisch

byjulianrubisch

0•

セキュリティとテスト

Performs systematic Rails code reviews and audits across architecture, performance, security, and testing dimensions while enforcing idiomatic patterns.

This skill provides a comprehensive auditing framework for Ruby on Rails applications, allowing developers to run deep-dive reviews across five critical dimensions: architecture, code quality, performance, testing, and security. Unlike generic linters, it enforces specific architectural opinions—such as favoring domain models and form objects over service objects—to ensure maintainable, idiomatic Rails codebases. It is ideal for conducting thorough repository audits, reviewing pull requests, and identifying high-priority technical debt or security vulnerabilities directly within the Claude Code environment.

主な機能

01Strict enforcement of modern Rails architectural patterns in favor of bloated service objects

02Prioritized reporting of findings by severity with actionable code fix suggestions

03Five-dimensional audits covering architecture, quality, performance, testing, and security

04Automated context gathering from core Rails files like Gemfile, routes, and database schema

050 GitHub stars

06Targeted review modes for specific pull requests or individual architectural dimensions

ユースケース

01Automating security and performance checks during the Pull Request review process

02Conducting a full architectural audit on a legacy Rails codebase to identify technical debt

03Refactoring bloated controllers or models into idiomatic patterns like Query and Form objects

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add julianrubisch/skills-private jr-rails-review

For use in Claude.ai and ChatGPT

主な機能

01Strict enforcement of modern Rails architectural patterns in favor of bloated service objects

02Prioritized reporting of findings by severity with actionable code fix suggestions

03Five-dimensional audits covering architecture, quality, performance, testing, and security

04Automated context gathering from core Rails files like Gemfile, routes, and database schema

050 GitHub stars

06Targeted review modes for specific pull requests or individual architectural dimensions

ユースケース

01Automating security and performance checks during the Pull Request review process

02Conducting a full architectural audit on a legacy Rails codebase to identify technical debt

03Refactoring bloated controllers or models into idiomatic patterns like Query and Form objects