Rails Consultant — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Rails Consultant (Plugin) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
Aggregate score unchanged between these scans.
The primary manifest — the file an agent reads to learn what this artifact does.
A collection of [skills][] for Rails development and consulting, with an emphasis on learning, communication, and client success.
Several skills draw on articles, books, and talks created by thoughtbot:
Install with [skills][]:
npx skills add thoughtbot/rails-consultantAdd the marketplace to Claude Code:
/plugin marketplace add thoughtbot/rails-consultantInstall the plugin:
/plugin install rails-consultant@rails-consultant#### /explain
Explains a specific piece of code or a user-facing flow. Point it at a file, class, or method for a close reading; point it at a feature or user action for a system-level diagram with entry points, branching logic, and side effects.
/explain app/models/user.rb
/explain password reset
/explain the Stripe webhook handler#### /prior‑art
Finds every place the codebase handles a specific concern — the consistent pattern and the exceptions. Answers the "how does this app do X?" question before you build something that reinvents it.
/prior-art How does this app handle authorization?
/prior-art Where do we send transactional emails?
/prior-art How are background jobs retried on failure?#### /test‑driven‑development
Strict outside-in TDD workflow for Rails. Starts with a feature spec describing behavior from the user's perspective, lets each failure guide what to build next, and drops to unit tests for non-trivial logic. Enforces the discipline: no production code without a failing test first. Red-green-refactor.
/test-driven-development Users can cancel their subscription from the billing page
/test-driven-development Fix the bug where archived projects still appear in search resultsBased on [Superpowers][superpowers] by Jesse Vincent, adapted for Rails with guidance from [Testing from the Outside-In][outside-in], [The Testing Pyramid][testing-pyramid], and [Testing Antipatterns][antipatterns].
#### /socratic‑review
A pairing session, not a report. Reads the code silently, then leads you to see the issues yourself through questions — whether it's your own code, a teammate's PR, or something you inherited. Names smells and moves precisely, then closes with a concrete plan: what to fix, in what order, and where to start.
/socratic-review app/services/payment_processor.rb
/socratic-review the open PR on branch feature/notifications
/socratic-review I inherited this controller and something feels off#### /slice
Turns a feature into well-defined, independently shippable slices — whether it's an epic that needs breaking apart or a single story that needs sharpening into a job story. Works Socratically: guides you to find the slices yourself, validates each against the "can it ship independently?" and "can a user see the value?" tests, then helps you sequence by risk and learning, not by ease.
/slice Users need to be able to manage their subscription
/slice We need an admin dashboard for customer support
/slice Add multi-tenancy to the existing appInspired by [Break Apart Your Features into Full-Stack Slices][full-stack-slices] and [Job Stories][job-stories] from the thoughtbot Playbook.
#### /rubber‑duck
Socratic friction to help you find clarity, not sympathy. Follows your thinking with one question at a time — the actual problem underneath, what you've already ruled out, what your gut says. Closes with an honest synthesis and one question you've been avoiding.
/rubber-duck I can't decide between a service object and a concern here
/rubber-duck I keep going back and forth on whether to extract this into a gem
/rubber-duck#### /challenge
Cross-examines a belief, design decision, or inherited constraint. Asks where it came from, what evidence would change it, and what the simplest alternative is. Has opinions — says directly when an assumption is weak and names the better path.
/challenge We need microservices because the monolith won't scale
/challenge We can't use Hotwire because our UI is too complex
/challenge The client says we have to support IE11#### /standup
Writes a polished, ready-to-send client update. Checks git for context, then asks what the code can't tell: what you actually spent time on, what the client must know, what risks you might be softening. Pushes on internal team communication too — not just what goes to the client.
/standup
/standup We spent most of the day debugging a production issue with Sidekiq#### /hard‑news
A prep session before a difficult client conversation. Asks you to write your opening sentences before polishing them — then uses what comes out to show you how you instinctively handle pressure. Produces the opening, explanation, path forward, likely reactions, and specific phrases to avoid.
/hard-news The launch date is going to slip by two weeks
/hard-news We found a security vulnerability in production
/hard-news We need to recommend rewriting a module the client just paid for#### /offboard
Walks through the Designer/Developer wrap-up checklist for offboarding a client engagement — one item at a time, assisting where it can (scanning for secrets, checking branches, reviewing the README). No documents produced; the conversation is the deliverable.
/offboard
/offboard We're wrapping up the Acme Corp engagement this FridayThe commands in Rails Consultant pair well with the following plugins.
/slice to break down a feature or epic into a[Full-Stack Slice][full-stack-slices].
/test-driven-development to drive out the implementation by [testing from the outside-in][outside-in] using the [testing pyramid][testing-pyramid]./simplify to refactor the shameless green implementation./explain to help you understand the change./socratic-review to deliberately slow down and get a betterunderstanding of the PR yourself.
/code-review][code-review] only after you've given your own feedback.See the [CONTRIBUTING][] document. Thank you, [contributors][]!
Rails Consultant is Copyright (c) thoughtbot, inc. It is free software, and may be redistributed under the terms specified in the [LICENSE] file.
[LICENSE]: /LICENSE
This repo is maintained and funded by thoughtbot, inc. The names and logos for thoughtbot are trademarks of thoughtbot, inc.
We love open source software! See [our other projects][community]. We are [available for hire][hire].
[CONTRIBUTING]: CONTRIBUTING.md [antipatterns]: https://thoughtbot.com/upcase/videos/testing-antipatterns [code-review]: https://claude.com/plugins/code-review [code-simplifier]: https://claude.com/plugins/code-simplifier [community]: https://thoughtbot.com/community?utm_source=github [context7]: https://claude.com/plugins/context7 [contributors]: https://github.com/thoughtbot/rails-consultant/graphs/contributors [explanatory-output-style]: https://claude.com/plugins/explanatory-output-style [full-stack-slices]: https://thoughtbot.com/blog/break-apart-your-features-into-full-stack-slices [hire]: https://thoughtbot.com/hire-us?utm_source=github [job-stories]: https://thoughtbot.com/playbook/rapid-product-validation/jtbd#how-to-write-and-use-job-stories [outside-in]: https://thoughtbot.com/blog/testing-from-the-outsidein [security-guidance]: https://claude.com/plugins/security-guidance [skills]: https://code.claude.com/docs/en/skills [superpowers]: https://github.com/obra/superpowers/blob/main/skills/test-driven-development/SKILL.md [testing-pyramid]: https://thoughtbot.com/blog/rails-test-types-and-the-testing-pyramid
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.