Is leicao-me/railway-skill safe?
Yes. leicao-me/railway-skill is safe to install. Oathe's behavioral security audit gave the railway-skill skill by leicao-me a trust score of 95/100 with 2 findings, none critical or high.
https://github.com/openclaw/skills/tree/main/skills/leicao-me/railway-skill
Is leicao-me/railway-skill safe to install?
This skill provides legitimate Railway CLI documentation and command examples. It contains only markdown documentation with no executable code, scripts, or malicious content. All security monitoring passed with only minor observations around external documentation links and normal monitoring file access.
What security issues were found in leicao-me/railway-skill?
Category Scores
Findings (2)
LOW External documentation URLs referenced -5 ▶
The skill contains links to external Railway documentation sites (docs.railway.com, railway.app, github.com/railwayapp/cli). While these appear legitimate, external URLs represent minimal risk if compromised.
INFO Monitoring detected canary file access -10 ▶
System monitoring detected access to honeypot files (.env, SSH keys, AWS credentials) during the install process, but all files remained intact indicating no actual exfiltration occurred.
Should I install leicao-me/railway-skill?
Oathe's verdict for leicao-me/railway-skill is SAFE with a trust score of 95/100. Recommendation: Install.