Does this skill help with Rails security?

Yes, it enforces the use of strong parameters to prevent mass-assignment and ensures all database queries are parameterized to protect against SQL injection.

How does this skill handle Rails performance issues?

The skill provides patterns to identify and resolve N+1 queries using eager loading (.includes) and offers guidance on caching and background job processing via Sidekiq.

Can I use this for API development?

Absolutely. It includes specific conventions for versioned API routing and standardized JSON serialization using tools like JSONAPI::Serializer.

What testing frameworks are supported?

The skill focuses on RSpec for behavior-focused testing, using FactoryBot for test data generation instead of traditional fixtures.

What is the recommended way to handle business logic?

It promotes 'Thin Controllers' and 'Fat Service Objects,' moving complex logic out of ActiveRecord models and controllers into dedicated service classes.

Ruby & Rails Best Practices

Name: Ruby & Rails Best Practices
Author: phrazzld

byphrazzld

•

API開発

Implements industry-standard Ruby and Rails conventions for service-oriented architecture, performance optimization, and robust testing.

This skill provides a comprehensive framework for writing clean, maintainable, and secure Ruby and Rails code by enforcing established industry standards. It guides developers through implementing service objects to keep controllers and models thin, utilizing FactoryBot for behavior-focused RSpec testing, and preventing common performance bottlenecks like N+1 queries. By integrating patterns for strong parameters, parameterized SQL, and versioned API design, this skill ensures your application remains scalable and secure while adhering to modern language idioms like safe navigation and frozen string literals.

主な機能

012 GitHub stars

02Enforcement of Ruby language idioms and RuboCop-aligned styles

03API design conventions for JSON serialization and versioned routing

04Standardized RSpec testing with FactoryBot and mock objects

05Service object patterns for decoupled and testable business logic

06SQL injection prevention and N+1 query optimization strategies

ユースケース

01Refactoring 'fat' models and controllers into clean, maintainable service objects

02Optimizing database query performance and auditing for security vulnerabilities

03Setting up comprehensive unit and integration testing suites for new Rails features

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add phrazzld/claude-config ruby-conventions

For use in Claude.ai and ChatGPT

Download Skill