railway-domain
Pass
Audited by Gen Agent Trust Hub on Oct 5, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
railwayCLI tool to interact with the Railway platform for domain management. Specifically, it executesrailway domaincommands with various flags to generate Railway-provided domains or configure custom domains. - [INDIRECT_PROMPT_INJECTION]: The skill represents a surface for indirect prompt injection as it takes user-supplied values, such as domain names (e.g.,
example.com) and service IDs, and interpolates them into bash commands and JSON configuration objects. However, this is consistent with its intended purpose as a management utility, and the provided error handling suggests the CLI performs format validation.
Audit Metadata