rails-upgrade Audit report.

Warnings

• Dependency or permission surface needs review
• Permission surface may require sandboxing
• The SKILL.md excerpt is truncated, but the visible content is comprehensive and well-organized.
• The skill references an 'upgrade-cleanup' plugin in trigger patterns but does not list it in the Dependencies section, which could cause confusion about required setup.
• The skill depends on two external skills (dual-boot and rails-load-defaults) that must be installed separately; this is clearly stated but could be a barrier if users are unaware.
• Quality score needs review
• Permission surface needs review: shell or command execution, filesystem or document access
• Stars/forks activity: 381 stars, 15 forks; issue activity unavailable in current metadata
• Dependency/runtime risk: command execution surface, network or browser surface
• Permission surface: shell or command execution, filesystem or document access

Method

This report combines public metadata, AI review output, repository freshness, install readiness, OpenAgentSkill events, quality scoring, trust checks, and the agent safety gate. It is not a full source-code security review.