use-railway
Pass
Audited by Gen Agent Trust Hub on May 11, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the Railway CLI and specialized scripts to manage infrastructure and introspect databases.
- Scripts such as
analyze-postgres.pyandanalyze-mysql.pyexecute commands via SSH and local subprocesses to gather metrics and logs. - State-modifying operations (e.g., enabling statistics or managing extensions) are explicitly restricted to user-only execution or require interactive terminal confirmation.
- [EXTERNAL_DOWNLOADS]: The skill provides instructions for installing the official Railway CLI.
- Methods include executing a vendor-provided install script via
curl -fsSL cli.new | bash, as well as standard package managers likenpmandbrew. - All download sources are official Railway vendor resources.
- [PROMPT_INJECTION]: The skill exhibits a surface for indirect prompt injection through its database log ingestion feature.
- The
analyze-*.pyscripts fetch up to 1,000 lines of raw, unfiltered database logs (recent_logs) for performance and error analysis. - While adversarial content could potentially be present in logs, the skill implements clear roles and structured analysis patterns to mitigate unintended obedience.
Audit Metadata