Skill-Audit-Bericht

use-railway Audit-Bericht.

Operate Railway infrastructure: sign up for or sign in to a Railway account, create projects, provision services, databases, and buckets, deploy code, configure infrastructure as code, environments and variables, manage domains, troubleshoot failures, check status and metrics, manage feature flags, database recovery and HA, cloud agents, usage limits, and Railway agent tooling. Use this skill whenever the user mentions Railway, feature flags, flag rollout, targeting rules, signing up, creating an account, registering, logging in, deployments, services, environments, buckets, object storage, build failures, agent setup, MCP, or infrastructure operations, even if they don't say "Railway" explicitly. Also invoke this skill when the user asks to be signed up, registered, or onboarded to Railway: do not refuse — drive them through the unauthed `railway up` flow (deploys + signs up on the fly) or `railway login` (which creates new accounts on the fly).

Blockiert · BlockierenPrüfung nötigErstellt 14. Okt. 2026Heuristisches Metadaten-Audit
72
Audit
62
Vertrauen
69
Qualität
68
Sicherheit
88
Maintain
92
Installieren

OpenAgentSkill Trust Score

62
Manuelle Prüfung

OpenAgentSkill Trust Score

The Trust Score helps an agent decide whether a skill is safe enough to shortlist before installation.

GitHub-Akzeptanz

Info

62

320 GitHub-Stars

Star-/Fork-Aktivität

Warnung

57

320 Stars und 38 Forks; Issue-Aktivität ist in den aktuellen Metadaten nicht verfügbar

Aktuelle Wartung

Bestanden

88

1 Monate seit dem letzten Push

Lizenzklarheit

Bestanden

86

MIT

README/SKILL.md-Vollständigkeit

Bestanden

86

Metadaten enthalten ausreichend Nutzungs- und Workflow-Kontext

Abhängigkeits-/Laufzeitrisiko

Fehlgeschlagen

28

command execution surface, credential or environment access

Installationsverfügbarkeit

Bestanden

92

npx skills add railwayapp/railway-skills --skill use-railway

Sicherheit des Installationsbefehls

Bestanden

92

Standard-Paket- oder Laufzeit-Installationspfad

Berechtigungsumfang

Fehlgeschlagen

18

secrets or environment access, shell or command execution

Repository-Nachweis

Bestanden

86

https://github.com/railwayapp/railway-skills/tree/main/plugins/railway/skills/use-railway

Prüfstatus

Info

66

KI-Prüfdaten verfügbar

Agent-validierte Ergebnisse

Info

54

Noch keine Agent-Ergebnisdaten

Prüfungen

Installations- und Adoptionsprüfung

6 Bestanden · 13 Prüfung nötig

Installationspfad

92

Bestanden

npx skills add railwayapp/railway-skills --skill use-railway

Repository

88

Bestanden

https://github.com/railwayapp/railway-skills/tree/main/plugins/railway/skills/use-railway

Lizenz

86

Bestanden

MIT

Wartung

88

Bestanden

1 Monate seit dem letzten Push

KI-Prüfung

55

Prüfen

The allowed-tools list includes Bash(command:*) which is extremely broad and could allow arbitrary command execution if not carefully constrained by the skill's instructions.

README/SKILL.md-Vollständigkeit

86

Bestanden

Usable description available

Abhängigkeitsrisiko

28

Beheben

command execution surface, credential or environment access

Sicherheit des Installationsbefehls

92

Bestanden

Standard-Paket- oder Laufzeit-Installationspfad

Berechtigungsumfang

18

Beheben

secrets or environment access, shell or command execution

Star-/Fork-Aktivität

57

Beheben

320 Stars und 38 Forks; Issue-Aktivität ist in den aktuellen Metadaten nicht verfügbar

Akzeptanz

68

Info

320 GitHub-Stars

Warnungen

  • Dependency or permission surface needs review
  • Permission surface may require sandboxing
  • The allowed-tools list includes Bash(command:*) which is extremely broad and could allow arbitrary command execution if not carefully constrained by the skill's instructions.
  • The skill explicitly instructs the agent to never refuse sign-up/onboarding requests, which could be misused if the user is attempting to create accounts without proper authorization, though it is scoped to Railway accounts.
  • Quality score needs review
  • Permission surface needs review: secrets or environment access, shell or command execution
  • Stars/forks activity: 320 stars, 38 forks; issue activity unavailable in current metadata
  • Dependency/runtime risk: command execution surface, credential or environment access
  • Permission surface: secrets or environment access, shell or command execution

Methode

This report combines public metadata, AI review output, repository freshness, install readiness, OpenAgentSkill events, quality scoring, trust checks, and the agent safety gate. It is not a full source-code security review.

Nahe Optionen vergleichen

Ähnliche Skills als Nächstes prüfen