railway-status
Pass
Audited by Gen Agent Trust Hub on Jun 19, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
railway statuscommand to retrieve deployment and service information. The execution is properly scoped in the skill configuration to specific CLI tools. - [EXTERNAL_DOWNLOADS]: The skill references the installation of
@railway/clivia official package managers. This is a well-known service and represents standard, safe developer tooling. - [INDIRECT_PROMPT_INJECTION]: The skill processes structured JSON output from a CLI tool. While it lacks explicit boundary markers for the processed data, the risk is minimal as the content originates from the user's own Railway account and the tool access is restricted.
- Ingestion points: CLI output from
railway status --json(SKILL.md) - Boundary markers: Absent
- Capability inventory: Shell command execution via
Bash(SKILL.md) - Sanitization: Absent
Audit Metadata