Security audit

Audit a Rails codebase against thoughtbot practices

thoughtbot's rails-audit-thoughtbot skill has a coding agent review a whole Ruby on Rails application using the firm's published guidance on testing and code design. It looks at RSpec tests, security issues, models, controllers, views, database use and general Ruby style. The result is a Markdown report sorted by area, with each finding rated from Critical down to Low.