# paveg/rails-activestorage-vips-audit

Agent skill that audits a Rails codebase for CVE-2026-66066 (KindaRails2Shell) — Active Storage + libvips arbitrary file read / RCE, checking Rails and libvips versions and block-untrusted mitigations

## Repository

- [Catalog detail page](https://awesomeclaudeplugins.com/paveg/rails-activestorage-vips-audit)
- [GitHub repository](https://github.com/paveg/rails-activestorage-vips-audit)
- Stars: 0
- Forks: 0
- 1 plugin entries are reported.

## Catalog provenance

- Publication state: indexable
- Quality note: Canonical repository has a description and validated plugin count.
- Catalog snapshot: Aug 31, 2026
- Repository metadata source: public GitHub API when available

## Installation

When this repository exposes a Claude Code marketplace, add it with:

```bash
/plugin marketplace add paveg/rails-activestorage-vips-audit
```