ClawHub
Back to skill

Security audit

Railway

Security checks across malware telemetry and agentic risk

Overview

This skill appears to be a normal Railway CLI guide, but users should treat its deployment, variable, SSH, and database commands as production-sensitive.

Install only if you want the agent to help operate Railway projects. Before running commands that delete resources, read variables, SSH into services, or connect to a production database, confirm the target project and environment and avoid exposing secrets in chat, logs, or shell history.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (3)

Missing User Warnings

Medium
Confidence
89% confidence
Finding
The skill documents destructive commands such as deleting services, environments, domains, or volumes without any cautionary context, confirmation guidance, or note about irreversibility. In an agent skill, this increases the chance that an automated or inattentive user will execute impactful operations against production infrastructure, causing outages or data loss.

Missing User Warnings

Medium
Confidence
92% confidence
Finding
The environment variable section shows setting, deleting, and retrieving variables but does not warn that these values often contain secrets such as API keys, database URLs, or tokens. In a skill context, this can lead agents or users to expose sensitive values in terminal output, logs, chat transcripts, or shell history.

Missing User Warnings

Medium
Confidence
94% confidence
Finding
The production database workflow instructs use of `railway run psql $DATABASE_URL` and SSH access without warning about the risks of operating on production data and credentials. This can lead to accidental disclosure, modification, or destruction of live customer data, especially when used by an autonomous agent or copied into shared logs.

VirusTotal

66/66 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.