Skills
Navigate
skills/railcode-hq/railcode-skills/manage-railcode-org/Gen Agent Trust Hub

manage-railcode-org

Pass

Audited by Gen Agent Trust Hub on Oct 28, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill reads and processes data from the Railcode platform which could include untrusted content. \n
  • Ingestion points: Command output from railcode logs, railcode analytics, and railcode query run as described in SKILL.md and references/cli-management.md. \n
  • Boundary markers: The instructions do not define delimiters or specific warnings to ignore instructions embedded in command outputs. \n
  • Capability inventory: The agent can execute a wide range of state-mutating commands including apps delete, roles grant, and connections create via the CLI. \n
  • Sanitization: No explicit sanitization or validation of the platform data is specified. \n- [EXTERNAL_DOWNLOADS]: The skill requires the installation and update of vendor-provided components from public registries. \n
  • Installs the railcode CLI package from the npm registry. \n
  • Adds skill sets from the Railcode-HQ/railcode-skills GitHub repository, which belongs to the verified vendor. \n- [COMMAND_EXECUTION]: The skill relies on the execution of the railcode command-line utility for organization management, authentication, and diagnostic feedback.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 28, 2026, 05:56 PM