deploy
Pass
Audited by Gen Agent Trust Hub on Aug 10, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill generates and executes shell commands using the railway CLI tool, such as railway up and railway environment edit. Access is restricted via the YAML frontmatter to the railway command namespace.
- [PROMPT_INJECTION]: The skill includes user-provided text in deployment commit messages, which represents a point where external data is ingested into a shell command. 1. Ingestion points: User-provided commit messages in SKILL.md. 2. Boundary markers: None; the instructions do not specify sanitization or delimiters for the user strings. 3. Capability inventory: Shell command execution via the railway tool. 4. Sanitization: Not explicitly defined in the provided instructions.
Audit Metadata