Does this skill help with Rails security?

Yes, it enforces the use of strong parameters to prevent mass-assignment and ensures all database queries are parameterized to protect against SQL injection.

How does this skill handle Rails performance issues?

The skill provides patterns to identify and resolve N+1 queries using eager loading (.includes) and offers guidance on caching and background job processing via Sidekiq.

Can I use this for API development?

Absolutely. It includes specific conventions for versioned API routing and standardized JSON serialization using tools like JSONAPI::Serializer.

What testing frameworks are supported?

The skill focuses on RSpec for behavior-focused testing, using FactoryBot for test data generation instead of traditional fixtures.

What is the recommended way to handle business logic?

It promotes 'Thin Controllers' and 'Fat Service Objects,' moving complex logic out of ActiveRecord models and controllers into dedicated service classes.

Ruby & Rails Best Practices

Name: Ruby & Rails Best Practices
Author: phrazzld

byphrazzld

•

API Development

Implements industry-standard Ruby and Rails conventions for service-oriented architecture, performance optimization, and robust testing.

About

This skill provides a comprehensive framework for writing clean, maintainable, and secure Ruby and Rails code by enforcing established industry standards. It guides developers through implementing service objects to keep controllers and models thin, utilizing FactoryBot for behavior-focused RSpec testing, and preventing common performance bottlenecks like N+1 queries. By integrating patterns for strong parameters, parameterized SQL, and versioned API design, this skill ensures your application remains scalable and secure while adhering to modern language idioms like safe navigation and frozen string literals.

Key Features

2 GitHub stars
Enforcement of Ruby language idioms and RuboCop-aligned styles
API design conventions for JSON serialization and versioned routing
Standardized RSpec testing with FactoryBot and mock objects
Service object patterns for decoupled and testable business logic
SQL injection prevention and N+1 query optimization strategies

Use Cases

Refactoring 'fat' models and controllers into clean, maintainable service objects
Optimizing database query performance and auditing for security vulnerabilities
Setting up comprehensive unit and integration testing suites for new Rails features

About

Key Features

2 GitHub stars
Enforcement of Ruby language idioms and RuboCop-aligned styles
API design conventions for JSON serialization and versioned routing
Standardized RSpec testing with FactoryBot and mock objects
Service object patterns for decoupled and testable business logic
SQL injection prevention and N+1 query optimization strategies

Use Cases

Refactoring 'fat' models and controllers into clean, maintainable service objects
Optimizing database query performance and auditing for security vulnerabilities
Setting up comprehensive unit and integration testing suites for new Rails features