use-railway
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Refers to official Railway installation scripts located at
railway.comandagents.railway.com. These are trusted vendor endpoints. - [COMMAND_EXECUTION]: The skill uses the
subprocessmodule to wrap therailwayCLI for various management tasks and uses SSH to perform performance introspection on remote database instances. - [INDIRECT_PROMPT_INJECTION]: The skill retrieves and analyzes raw database logs and performance metrics from Railway's API. This data is external and untrusted, but the skill is designed to use this information for diagnostics under agent supervision.
- [CREDENTIALS_UNSAFE]: The skill reads the authentication token from the local Railway config (
~/.railway/config.json). This is the standard method for CLI tool integrations, and the scripts follow best practices to avoid leaking this token in system process lists.
Audit Metadata