SKILLS/new-rails-project/SKILL.md
Create a new Rails project
npx skillsauth add pinkpixel-dev/skills-collection-2 new-rails-projectInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
Generate a new Rails project named $1 in the current directory. You may reference @CLAUDE.md for general guidance, though the guidance here takes precedence.
Set up the following tech stack:
timestamptz for timezone awarenessmocha gem and VCR for external services (only in the providers layer)OpenStruct for mock instancesbundle exec rubocop -a after significant code changes.rubocop.yml for style configurationbundle exec brakemanVerify the boilerplate is working by running bin/rails server and accessing the application at http://localhost:3000 via playwright MCP.
development
A cryptographic audit systematically reviews an application's use of cryptographic primitives, protocols, and key management to identify vulnerabilities such as weak algorithms, insecure modes, hardco
tools
Extract stored credentials from compromised endpoints using the LaZagne post-exploitation tool to recover passwords from browsers, databases, system vaults, and applications during authorized red team operations.
testing
Analyze and bypass Content Security Policy implementations to achieve cross-site scripting by exploiting misconfigurations, JSONP endpoints, unsafe directives, and policy injection techniques.
testing
Scan container images, filesystems, and Kubernetes manifests for vulnerabilities, misconfigurations, exposed secrets, and license compliance issues using Aqua Security Trivy with SBOM generation and CI/CD integration.