skill-rails-api

A set of development patterns for building APIs with Ruby on Rails 8. It covers project structure, database access, background jobs, real-time updates, authentication, authorization, validation, API documentation, testing, and security tools.

In plain words
What is it for?
Use it when starting a Rails 8 API, adding features to one, moving from Rails 7, or checking an existing Rails project against these patterns.
Why use it?
It gives Rails API projects consistent choices for common concerns such as permissions, serialized responses, rate limits, and background work.

Skill for Claude CodeCodex

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add skills/dewtech-technologies/dare-method/skill-rails-api
Any agent
npx skills add dewtech-technologies/dare-method --skill skill-rails-api
Clone the repo
git clone --depth 1 https://github.com/dewtech-technologies/dare-method

Made for: Claude Code, Codex.

Per session 66 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 2,867 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00066 $0.02867
Opus 5 $0.00033 $0.01434
Sonnet 5 $0.00013 $0.00573
Haiku 4.5 $0.00007 $0.00287

Measured 2d ago against content hash 64a81abf7d92, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

skill-rails-api scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

implementations/antigravity/.agents/skills/skill-rails-api/SKILL.md · 394 lines

How it starts

The opening of the file, as written. The whole thing — 394 lines — stays where its author put it; the contents beside it link to each section on GitHub.

DARE Rails API Skill

Você é um desenvolvedor sênior Ruby on Rails 8.x especializado em APIs. Seu objetivo é gerar código idiomático Rails, com Layered Design, Solid Queue/Cable, serializers explícitos e auth/autz robustos.

Quando usar

  • Projeto Rails 8 API novo via DARE
  • Adicionar feature em API Rails existente
  • Migrar de Rails 7 → 8 (incluindo Solid Queue + Solid Cable)
  • Auditar projeto Rails para conformidade DARE

Stack canônica

  • Ruby 3.3+
  • Rails 8.x modo API (rails new --api)
  • PostgreSQL 16
  • Solid Queue (substitui Sidekiq/DelayedJob — built-in Rails 8)
  • Solid Cable (substitui Redis para Action Cable — built-in Rails 8)
  • Devise ou JWT puro (devise-jwt) para auth
  • Pundit ou CanCanCan para autorização
  • Blueprinter ou Alba para serializers (substituem Jbuilder em APIs)
  • rack-attack para rate limit
  • rswag para OpenAPI/Swagger
  • RSpec + FactoryBot + Faker
  • Rubocop + rubocop-rails-omakase (estilo oficial Rails)
  • bundler-audit para CVEs

Layered Design em Rails

Mapeamento DARE → Rails:

Camada DARE Pasta Rails
Handler app/controllers/api/v1/
Service app/services/ (ou app/interactors/)
Repository app/repositories/ (opcional — Rails usa AR direto frequentemente)
Model app/models/
Presenter app/serializers/ ou app/blueprints/

Em Rails 8 API, Repositories são opcionais — ActiveRecord queries em Services é comum quando bem encapsulado.

Controllers (Handler)

# app/controllers/api/v1/users_controller.rb
module Api
  module V1
    class UsersController < ApplicationController
      before_action :authenticate_user!

      def create
        result = RegisterUser.call(params: user_params)
        if result.success?
          render json: UserBlueprint.render(result.user), status: :created
        else
          render json: { error: result.error_code }, status: :conflict
        end
      end

      private

      def user_params
        params.require(:user).permit(:email, :name, :password)
      end
    end
  end
end

Read the full file on GitHub · 394 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 2d ago First seen · 394 lines · 66 tokens per session scan A 64a81abf7d92

Subscribe to this mod's changes

skill-rails-api is a skill published in the GitHub repository dewtech-technologies/dare-method (5 stars, last pushed 1mo ago), licensed MIT. It adds 66 tokens to every session and 2,867 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.

Related

Other skills, from other repositories

write-test-plan

Generate a QA/UAT test plan from product specifications and task definitions, covering acceptance testing, integration flows, and exploratory testing. Unit tests are out of scope (handled by write-unit-tests skill).

andresharpe/dotbot · 43 tokens

implement-telegram-bot

Implement Telegram bot interactions with command handlers, message parsing, and inline keyboards for conversational interfaces.

andresharpe/dotbot · 23 tokens

setup-background-job

Set up scheduled background jobs using Quartz.NET with proper configuration, error handling, and dependency injection.

andresharpe/dotbot · 22 tokens

write-unit-tests

Write comprehensive unit tests with proper setup, assertions, and coverage of happy paths, edge cases, and error scenarios.

andresharpe/dotbot · 26 tokens

blazor-component-design

Design Blazor components with proper parameter binding, event callbacks, lifecycle management, and render optimization. Use when creating new Blazor Server or WASM components, refactoring component hierarchies, implementing cascading values, or optimizing component rendering performance.

andresharpe/dotbot · 53 tokens

hedgehog-planning-intake

Use on any core for first-run planning intake — Phase 0 runs the vendored BMAD-METHOD planning shelf, shared by every core, and Phase 1 (mining 04-prd.md into intent records plus the Add-ons/sync-and-remote-entities decision) is full-stack-app's and pwa-app's shared procedure — identical mechanics, a different…

skyf0xx/hedgehog · 374 tokens