rails-security-auditor

Rails Claude Code Plugins

A collection of Claude Code plugins for Ruby on Rails development.

Installation

# Add the marketplace
/plugin marketplace add maquina-app/rails-claude-code

# Install individual plugins
/plugin install rails-simplifier@maquina
/plugin install rails-upgrade-assistant@maquina
/plugin install maquina-ui-standards@maquina
/plugin install recuerd0@maquina
/plugin install mvp-creator@maquina
/plugin install better-stimulus@maquina
/plugin install spec-driven-development@maquina
/plugin install rails-security-auditor@maquina
/plugin install rails-hotwire-driver@maquina

---

Plugins

Plugin	Description	Version
rails-simplifier	Code quality following 37signals patterns	1.1.0
rails-upgrade-assistant	Rails 6.0→8.1 upgrade planning	1.2.0
maquina-ui-standards	UI components with maquina_components	0.4.4
recuerd0	Knowledge management from AI conversations	1.4.0
mvp-creator	MVP documentation for Rails applications	1.0.1
better-stimulus	StimulusJS best practices from betterstimulus.com	1.1.0
spec-driven-development	Spec-driven development workflow for Rails	1.3.0
rails-security-auditor	Security audit for Rails 8.0–8.2 configuration	1.0.1
rails-hotwire-driver	Drive a running Rails dev server from the terminal, optional screenshots/browser layer	0.3.0

---

1. rails-simplifier

A code simplification skill that refines Ruby on Rails code following 37signals patterns and the One Person Framework philosophy.

Philosophy

The One Person Framework (DHH, December 2021):

"A toolkit so powerful that it allows a single individual to create modern applications upon which they might build a competitive business."

Conceptual Compression (RailsConf 2018):

"Like a video codec that throws away irrelevant details such that you might download the film in real-time."

Vanilla Rails is Plenty (Jorge Manrubia, 37signals):

"If you have the luxury of starting a new Rails app today, go vanilla."

What It Does

Pattern	Simplification
Service objects	Rich model methods + concerns
Custom controller actions	CRUD resources
Boolean state columns	State records (has_one :closure)
Fat controllers	Thin controllers, model methods
Time.now	Time.current
Hardcoded strings	I18n keys
N+1 queries	includes / preload
Date tests without travel_to	Freeze time to fixture

Usage

> Simplify the recent changes to the bookings controller
> Refactor this to vanilla Rails / 37signals patterns
> Review this model against the rails-simplifier standards

Package Contents

rails-simplifier/
└── skills/simplify/
    ├── SKILL.md                # Main skill: rules, patterns, process
    └── references/
        ├── philosophy.md       # The "why" — 37signals / Jorge Manrubia philosophy
        └── patterns.md         # The "how" — implementation catalog from Fizzy

Resources

• 37signals Rails Patterns
• Jorge Manrubia's Blog
• Rails Doctrine

---

2. rails-upgrade-assistant

A unified, intelligent Rails upgrade assistant that helps you upgrade Ruby on Rails applications through any version from 6.0 to 8.1.1. Built on official Rails CHANGELOGs, it analyzes your project with the standard file tools — no external services required.

What It Does

• Analyzes your Rails project automatically by reading its files
• Detects your current version and target version
• Plans single-hop or multi-hop upgrade paths
• Identifies breaking changes specific to YOUR code
• Preserves your custom configurations with warnings
• Generates comprehensive upgrade reports (50+ pages)
• Based on official Rails CHANGELOGs from GitHub

Supported Upgrade Paths

From	To	Breaking Changes	Difficulty
8.0.x	8.1.1	8 changes	Easy
7.2.x	8.0.4	13 changes	Hard
7.1.x	7.2.3	38 changes	Medium
7.0.x	7.1.6	12 changes	Medium
6.1.x	7.0.0	17 changes	Hard
6.0.x	6.1.0	18 changes	Medium
6.0.x	8.1.1	All 106 changes	Very Hard

** Important:** Rails upgrades MUST be sequential. No version skipping!

Usage

> Upgrade my Rails app to 8.1
> Help me upgrade from Rails 7.2 to 8.0
> Generate a detection script for Rails 8.0 upgrade
> What breaking changes are in Rails 8.1?
> Assess upgrade impact from 7.0 to 8.1

Workflow