Security audit
Security checks for vulnerabilities and agentic risk
The Railway skill is coherent and not deceptive, but it teaches high-impact production operations without enough safeguards around deletion, secrets, and production database access.
Review this skill before installing if you plan to let an agent use Railway on real projects. Require explicit confirmation before production deploys, deletes, database commands, or secret reads; prefer staging and read-only database access where possible; redact environment-variable output; and ensure the Railway token or login has only the permissions needed.
The production database workflow encourages direct use of production credentials and interactive access without warning about the risk of modifying or exfiltrating live data. In this skill's deployment/operations context, an agent could run schema changes, queries, or maintenance commands against production unintentionally, causing outages, corruption, or sensitive data exposure.
The skill documents destructive commands like service and domain deletion without any warning about irreversibility, target verification, or prompting the user for confirmation. In an agent-assisted context, this increases the chance of accidental production-impacting actions because the documentation normalizes deletion operations as routine steps.
The environment variable section shows listing, getting, and setting variables but does not warn that these values often contain secrets such as API keys, database credentials, and tokens. In a skill used by an agent, this can lead to secrets being exposed in terminal output, logs, screenshots, or command history.
The note that database connection strings are automatically added to environment variables omits the security implication that sensitive credentials are being injected and may then be accessible via variable inspection or inherited commands. This is risky in an agent context because subsequent steps may inadvertently expose or misuse those credentials.
No suspicious patterns detected.
