setup-environment — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited setup-environment (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
.ruby-version, .tool-versions, Gemfile, docker-compose.yml, .env.example, config/database.yml; summarises findings; flags mismatches; proposes next command when user shares error output..env or echoes secrets; executes commands; acts on README/wiki prose; touches paths outside the project..env, decides whether to proceed on flagged mismatches.Emits a generic Rails onboarding runbook for the user to run locally. references/steps.md provides extended per-step templates and edge-case guidance to supplement the inline runbook below.
Step 1 — Inspect (agent reads)
The agent reads .ruby-version / .tool-versions, Gemfile (Ruby line), docker-compose.yml (service list), .env.example (required keys). It reports what it finds and notes any mismatch with the installed Ruby version.
Step 2 — Environment Variables
cp .env.example .env
# User edits .env with local valuesStep 3 — Docker
docker compose up -d
docker compose ps # expect all services healthyIf any service is unhealthy, the user shares log output with the agent. The agent proposes the next command; the user decides whether to run it.
Step 4 — Dependencies
bundle install
yarn install # or npm install; skip if importmapsStep 5 — Database
rails db:create db:migrate db:seedKeep this as one command unless the project requires separate steps; if split, explain why.
Ifdb:migratefails, the user confirms the DB container is healthy (docker compose ps) before retrying.
Step 6 — Linters
bundle exec rubocop --init # only if .rubocop.yml is missing
bundle exec rubocopStep 7 — IDE (optional)
code --install-extension Shopify.ruby-lsp
code --install-extension rubocop.vscode-rubocopbundle exec rspec
rails server # then visit http://localhost:3000Ifrspecfails on a clean setup, the user runsrails db:migrate RAILS_ENV=testand retries.
When asked to prepare environment setup, output answer.md following the Runbook structure above (Steps 1–7 plus Final Verification), with these additional sections:
| Skill | When to chain |
|---|---|
| load-context | When getting context on the project setup |
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.