railway-postgres-crud

The skill’s Railway database access and local credential flow fit its stated purpose, with no evidence of credential exfiltration or malicious intent. The principal security concern is disabling TLS certificate verification; unpinned dependency installation and the potential impact of database mutations are lesser risks. The production confirmation rule provides some protection but does not remove the TLS risk.