rails-audit-thoughtbot

🥈Silver

Automates code audits for Ruby on Rails applications using thoughtbot's best practices. Benefits developers and operations teams by identifying code quality issues and ensuring adherence to standards. Integrates with Claude Code for automated analysis and reporting.

4230Updated Today

Intermediate30min to implementautomation

Saves ~45 min per use

Quick InstallView Source

git clone https://github.com/thoughtbot/rails-audit-thoughtbot.git

Works with:

Claude

Overview

About This Skill

Setup & Installation

Quick Install

No install command available. Check the GitHub repository for manual installation instructions.

Alternative Install (Git Clone)

git clone https://github.com/thoughtbot/rails-audit-thoughtbot

Requirements

Claude Code or compatible AI agent
Works with: Claude

Quick Start Guide

Install the Skill

Copy the install command above and run it in your terminal.

Open Your AI Agent

Launch Claude Code, Cursor, or your preferred AI coding agent.

Try It Out

Use the prompt template or examples below to test the skill.

Customize

Adapt the skill to your specific use case and workflow.

Usage Examples

Prompt Template

Audit the following Ruby on Rails application codebase for adherence to thoughtbot's best practices. Focus on [SPECIFIC_AREA] (e.g., testing, security, performance). Provide a detailed report with findings and recommendations. Codebase: [CODEBASE_URL] or [PASTE_CODE].

Example Output

# Rails Audit Report: thoughtbot Best Practices

## Overview
Audit performed on [COMPANY]'s Rails application. Focus area: Testing and Security.

## Findings
### Testing
- **Insufficient Test Coverage**: Only 65% of models and controllers have test coverage.
  - *Recommendation*: Implement factory patterns and increase test coverage to 90%.
- **Missing Integration Tests**: Critical user flows lack integration tests.
  - *Recommendation*: Add Capybara tests for key user journeys.

### Security
- **Mass Assignment Vulnerability**: Some models permit mass assignment without proper protection.
  - *Recommendation*: Use `attr_accessible` or `strong_parameters` to restrict mass assignment.
- **SQL Injection Risks**: Raw SQL queries found in [FILE_PATH].
  - *Recommendation*: Use ActiveRecord query methods or parameterized queries.

## Recommendations
1. Implement factory patterns for consistent test data.
2. Add integration tests for critical user flows.
3. Restrict mass assignment in all models.
4. Replace raw SQL queries with ActiveRecord methods.
5. Schedule regular audits to maintain code quality.