railway-logs

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). SKILL.md describes using the Railway CLI to stream/view runtime/build/deploy/HTTP logs (e.g., railway logs, railway logs --json), and those logs are runtime text originating from the user’s application/service environment (i.e., not authored by the operating user), which can include arbitrary free text that would be ingested into the agent’s LLM context when the workflow reads the log output.