Full health and security audit for Rails apps, the review a principal engineer would do. Runs rubycritic, Brakeman, bundler-audit and ruby_audit, triages every finding with the LLM as judge, brings an OWASP Top 10 arsenal of checks for what scanners miss, and returns one impact-ranked action plan. Use for a Rails project audit, a security and health check, "nuke on rails", or a deep review of a vibecoded Rails app.
How to install nuke-on-rails?
nuke-on-rails/nuke-on-rails
$npx -y skills add nuke-on-rails/nuke-on-rails --skill nuke-on-railsInstalls into the current project.
›Prefer a prompt? Paste this to your agent
Run `npx skills use "https://github.com/nuke-on-rails/nuke-on-rails" --skill "nuke-on-rails/nuke-on-rails"` and follow the generated skill instructions now. Read its complete output, redirecting it to a temporary file first if necessary. Resolve relative paths from the supporting-files directory it provides.
Use the skills in "https://github.com/nuke-on-rails/nuke-on-rails" that are relevant to the current task. Run `npx skills add "https://github.com/nuke-on-rails/nuke-on-rails"` and select the relevant skills, then follow their instructions.
Related
6 picksType
- azure-messagingTroubleshoot and resolve issues with Azure Messaging SDKs for Event Hubs and Service Bus.Jul 2026
- lark-openapi-explorer飞书/Lark 原生 OpenAPI 探索：从官方文档库中挖掘未经 CLI 封装的原生 OpenAPI 接口。当用户的需求无法被现有 lark-* skill 或 lark-cli 已注册命令满足，需要查找并调用原生飞书 OpenAPI 时使用。Jul 2026
- lark-skill-maker创建 lark-cli 的自定义 Skill。当用户需要把飞书 API 操作封装成可复用的 Skill（包装原子 API 或编排多步流程）时使用。Jul 2026
- implementImplement a piece of work based on a spec or set of tickets.Jul 2026
- supabaseUse when doing ANY task involving Supabase. Triggers: Supabase products (Database, Auth, Edge Functions, Realtime, Storage, Vectors, Cron, Queues); client…Jul 2026
- firebase-basicsProvides foundational setup, authentication, and project management workflows for Firebase using the Firebase CLI.Jul 2026
