rails-audit-thoughtbot
🥈SilverAutomates code audits for Ruby on Rails applications using thoughtbot's best practices. Benefits developers and operations teams by identifying code quality issues and ensuring adherence to standards. Integrates with Claude Code for automated analysis and reporting.
7630Updated 3mo ago
Intermediate30min to implementautomation
Saves ~45 min per use
Quick InstallView Source
git clone https://github.com/thoughtbot/rails-audit-thoughtbot.gitWorks with:
Claude
Overview
About This Skill
The Rails Audit Skill analyzes Ruby on Rails applications and generates detailed reports covering testing practices, code quality, security vulnerabilities, design patterns, Rails conventions, database optimization, and performance antipatterns. It integrates with Claude Code to provide automated analysis based on thoughtbot's Ruby Science and Testing Rails guides. The skill supports full application audits or targeted reviews of specific directories, and optionally integrates with SimpleCov for test coverage metrics and RubyCritic for code complexity analysis. Each optional data-collection step is opt-in and non-invasive, temporarily adding tools only if needed. This skill benefits developers and operations teams seeking to align their Rails codebases with industry best practices and identify refactoring opportunities.
How to Use
Copy the skill directory to your Claude Code skills folder or clone from GitHub into ~/.claude/skills/. In a Claude session, reference the skill with /rails-audit-thoughtbot to run a full application audit, or use /rails-audit-thoughtbot audit [target] for targeted analysis of specific files or directories. The skill will optionally prompt you to collect SimpleCov coverage and RubyCritic metrics during the audit.
Use Cases
Evaluate test coverage and testing practices across an entire Rails application
Identify code smells, security vulnerabilities, and performance antipatterns in specific Rails modules
Audit database migrations and query optimization opportunities
Review controller design, domain models, and PORO usage patterns
Setup & Installation
Quick Install
No install command available. Check the GitHub repository for manual installation instructions.
Alternative Install (Git Clone)
git clone https://github.com/thoughtbot/rails-audit-thoughtbotRequirements
- Claude Code or compatible AI agent
- Works with: Claude
Quick Start Guide
1
Install the Skill
Copy the install command above and run it in your terminal.
2
Open Your AI Agent
Launch Claude Code, Cursor, or your preferred AI coding agent.
3
Try It Out
Use the prompt template or examples below to test the skill.
4
Customize
Adapt the skill to your specific use case and workflow.
Usage Examples
Prompt Template
Audit the following Ruby on Rails application codebase for adherence to thoughtbot's best practices. Focus on [SPECIFIC_AREA] (e.g., testing, security, performance). Provide a detailed report with findings and recommendations. Codebase: [CODEBASE_URL] or [PASTE_CODE].
Example Output
# Rails Audit Report: thoughtbot Best Practices ## Overview Audit performed on [COMPANY]'s Rails application. Focus area: Testing and Security. ## Findings ### Testing - **Insufficient Test Coverage**: Only 65% of models and controllers have test coverage. - *Recommendation*: Implement factory patterns and increase test coverage to 90%. - **Missing Integration Tests**: Critical user flows lack integration tests. - *Recommendation*: Add Capybara tests for key user journeys. ### Security - **Mass Assignment Vulnerability**: Some models permit mass assignment without proper protection. - *Recommendation*: Use `attr_accessible` or `strong_parameters` to restrict mass assignment. - **SQL Injection Risks**: Raw SQL queries found in [FILE_PATH]. - *Recommendation*: Use ActiveRecord query methods or parameterized queries. ## Recommendations 1. Implement factory patterns for consistent test data. 2. Add integration tests for critical user flows. 3. Restrict mass assignment in all models. 4. Replace raw SQL queries with ActiveRecord methods. 5. Schedule regular audits to maintain code quality.
Apply to these tools
Browse all toolsClaude
AI assistant built for thoughtful, nuanced conversation
Microsoft Teams
Get more done every day with Microsoft Teams – powered by AI
Drata
Automate security compliance and monitor real-time security posture seamlessly.
GPT for work
Automate your spreadsheet tasks with AI power
Respell
Agentic AI Workflow platform
Notion
Connected workspace for docs, wikis, and projects
Compatible MCP servers
Browse all MCP servers
Find the right skills for your stack
Take a free 3-minute scan and get personalized AI skill recommendations.
Take free scan