railway
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
railwayCLI to perform deployment operations, manage services, and link project directories. This is standard functionality for the service.\n- [DATA_EXFILTRATION]: Documentation identifies~/.railway/config.jsonas the storage location for authentication tokens required for GraphQL API access. This is a standard path for the Railway CLI and is used to facilitate authorized interactions with the platform.\n- [EXTERNAL_DOWNLOADS]: The skill recommends installingpython-json-loggerfor structured logging. This is a well-known, legitimate package from the official Python package registry.\n- [INDIRECT_PROMPT_INJECTION]: The skill enables reading application logs via therailway logscommand, which represents a potential surface for indirect injection of untrusted data into the agent context.\n - Ingestion points: Application log output retrieved via the
railway logscommand.\n - Boundary markers: Not present in the provided instructions.\n
- Capability inventory: Full application lifecycle management via the
railwayCLI (init, up, ssh, variables) and GraphQL API access.\n - Sanitization: No explicit sanitization of log content is defined.
Audit Metadata