Skip to main content

conductor-setup

Configures a Rails project for Conductor, enabling parallel coding agents with necessary scripts and Redis integration.

Install this skill

or
79/100

Security score

The conductor-setup skill was audited on Mar 8, 2026 and we found 9 security issues across 3 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 53

Template literal with variable interpolation in command context

SourceSKILL.md
53```bash
medium line 74

Fetch to external URL

SourceSKILL.md
74For each of the following files, if they exist and contain Redis configuration, update them to use `ENV.fetch('REDIS_URL', ...)` or `ENV['REDIS_URL']` with a fallback:
low line 79

Fetch to external URL

SourceSKILL.md
79redis_url = ENV.fetch('REDIS_URL', 'redis://localhost:6379/0')
low line 87

Fetch to external URL

SourceSKILL.md
87url: <%= ENV.fetch('REDIS_URL', 'redis://localhost:6379/1') %>
low line 93

Fetch to external URL

SourceSKILL.md
93config.cache_store = :redis_cache_store, { url: ENV.fetch('REDIS_URL', 'redis://localhost:6379/0') }
low line 99

Fetch to external URL

SourceSKILL.md
99Rack::Attack.cache.store = ActiveSupport::Cache::RedisCacheStore.new(url: ENV.fetch('REDIS_URL', 'redis://localhost:6379/0'))
medium line 113

Fetch to external URL

SourceSKILL.md
1133. Check that Rails configs properly reference `ENV['REDIS_URL']` or `ENV.fetch('REDIS_URL', ...)`
low line 36

Access to .env file

SourceSKILL.md
36# Symlink .env from repo root (where secrets live, outside worktrees)
low line 37

Access to .env file

SourceSKILL.md
37[ -f "$CONDUCTOR_ROOT_PATH/.env" ] && ln -sf "$CONDUCTOR_ROOT_PATH/.env" .env
Scanned on Mar 8, 2026
View Security Dashboard