railway-new
Pass
Audited by Gen Agent Trust Hub on Oct 5, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute various shell commands using the
railwayCLI for project lifecycle management, such asrailway init,railway link, andrailway add. It also leveragesnpmandnpxfor project scaffolding and package management. - [EXTERNAL_DOWNLOADS]: The skill directs the installation of the official Railway CLI (
@railway/cli) from the npm registry and utilizes well-known scaffolding tools likeviteandastro. These resources are consistent with the skill's infrastructure automation goals and originate from trusted registries. - [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied project names and analyzes local codebase files (e.g.,
package.json,requirements.txt,go.mod,Cargo.toml) to automate service configuration. Ingestion points: User-provided service names and project file contents analyzed inSKILL.mdandrailpack.md. Boundary markers: Absent. Capability inventory: Shell command execution via Railway CLI and npm tools inSKILL.md. Sanitization: Absent. While these surfaces could theoretically be targeted by malicious project files, the risk is inherent to the skill's primary function of infrastructure scaffolding.
Audit Metadata