railway-domain

Pass

Audited by Gen Agent Trust Hub on Oct 5, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes the railway CLI tool to interact with the Railway platform for domain management. Specifically, it executes railway domain commands with various flags to generate Railway-provided domains or configure custom domains.
  • [INDIRECT_PROMPT_INJECTION]: The skill represents a surface for indirect prompt injection as it takes user-supplied values, such as domain names (e.g., example.com) and service IDs, and interpolates them into bash commands and JSON configuration objects. However, this is consistent with its intended purpose as a management utility, and the provided error handling suggests the CLI performs format validation.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 5, 2026, 08:56 PM