railway-status

Pass

Audited by Gen Agent Trust Hub on Jun 19, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses the railway status command to retrieve deployment and service information. The execution is properly scoped in the skill configuration to specific CLI tools.
  • [EXTERNAL_DOWNLOADS]: The skill references the installation of @railway/cli via official package managers. This is a well-known service and represents standard, safe developer tooling.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes structured JSON output from a CLI tool. While it lacks explicit boundary markers for the processed data, the risk is minimal as the content originates from the user's own Railway account and the tool access is restricted.
  • Ingestion points: CLI output from railway status --json (SKILL.md)
  • Boundary markers: Absent
  • Capability inventory: Shell command execution via Bash (SKILL.md)
  • Sanitization: Absent
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 19, 2026, 12:56 PM
Security Audit — agent-trust-hub — railway-status