thoughtbot/rails-audit-thoughtbot

This skill runs a structured audit of Ruby on Rails applications using thoughtbot's internal best practices from Ruby Science and Testing Rails. It checks testing coverage with RSpec, flags security issues like SQL injection and mass assignment, reviews model and controller design, and rates each finding from critical to low severity. The result is a project report that helps Rails developers, team leads, and security reviewers catch regressions before they reach production, without relying on a human reviewer reading every file.