railway — 1 hook

Pinned source listing — machine-checked

What declarations and files are present in this pinned source?

Pinned source declarations and file hashes were listed.

Review

Machine-checked ·

Run UTC
Reviewed
Published
Updated

Observations · Limitations · Evidence

Works with:

Works with Claude Code
Works with Grok Build

What we ran

Git blob acquisition followed by static source inspection.

What we saw

Listed 1 hook declaration. Ran 42 git commands; each one's exit status and output hash is in commands.json. Scope: acquisition and static inspection.

Limits

Scope: acquisition and static inspection. Command results: commands.json.

developer-tools · hooks · Upstream source · Upstream documentation

Pinned source inspection only; no runtime platform was exercised. UTC 2026-10-19T15:16:05Z, tree 643011434adf0afded1cdf90af9337218050a2120c7776818b404db550edd02c.

No browser or computer-use tools. Pin this exact version; the stamp does not follow updates.

Full record
name
railway — 1 hook
slug
source-hooks-aef8b85d1208a641c8a37eac
type
hooks
category
developer-tools
example
false
evidence state
pinned_source_listing
stamp
Pinned source listing — machine-checked
summary
Pinned source declarations and file hashes were listed.
outcome
Listed 1 hook declaration. Ran 42 git commands; each one's exit status and output hash is in commands.json. Scope: acquisition and static inspection.
rule results
["The retained source tree matches its acquisition manifest.","Declared hook names (listing.json): PreToolUse"]
task
What declarations and files are present in this pinned source?
setup
Git blob acquisition followed by static source inspection.
limitations
Scope: acquisition and static inspection. Command results: commands.json.
source url
https://github.com/railwayapp/railway-skills.git
documentation url
https://github.com/railwayapp/railway-skills.git
commit
a100f93e482c5153774fed74d0b3fb8f8ca63342
tree sha256
643011434adf0afded1cdf90af9337218050a2120c7776818b404db550edd02c
file sha256
{"plugins/railway/.claude-plugin/plugin.json":"31aa2c23adc02342d1b140b48e2268c3fb7b63733b2d58e0a0daf8461bc62ecf","plugins/railway/.codex-plugin/assets/railway-logo-light.svg":"4de6561f7a865f6d987ea828fdfd7b8d45a14bf1a2cdb955a49d690b601cc430","plugins/railway/.codex-plugin/plugin.json":"07c25ec48beb830eec02623657f7aadf9423d406f040e89a2a43603f4b1e65bb","plugins/railway/.cursor-plugin/mcp.json":"5b2f85e319f524cbe4ad8387936199197a7917020cfdc0aaf9a626f8ce0c8ff0","plugins/railway/.cursor-plugin/plugin.json":"a2567c4a79b796680edc05f9a2b3e99157eefed5f12419dba97ba04a2a588bb7","plugins/railway/.grok-plugin/mcp.json":"5b2f85e319f524cbe4ad8387936199197a7917020cfdc0aaf9a626f8ce0c8ff0","plugins/railway/.grok-plugin/plugin.json":"6d1d0c3ec24044ba290c9d97166fa0e2051ea2417404ca45b97947fd06383609","plugins/railway/.mcp.json":"5b2f85e319f524cbe4ad8387936199197a7917020cfdc0aaf9a626f8ce0c8ff0","plugins/railway/hooks/auto-approve-api.sh":"f9214722a7a0f4fa9de85e14e18e1475232381ee9958c8dd125ed15907c78100","plugins/railway/hooks/auto-approve-api.test.sh":"612d2cfdbcab8f0402fce0577f15cb9a985ff409f57265abaea02e8526575c11","plugins/railway/hooks/hooks.json":"e0f2b587a3366a4dbe631ddc7248e7d9d2510e6344e107e1709230320c3723e5","plugins/railway/skills/use-railway/SKILL.md":"6cad29e016f02266a4d8439065e21d4e7200323e702095c58e7b6b951937ed9e","plugins/railway/skills/use-railway/references/analyze-db-mongo.md":"52e4470b5893563d6a02411a005d8434e0d7668a0c53e188f8b542bc8f4bcfac","plugins/railway/skills/use-railway/references/analyze-db-mysql.md":"281e01c4cac538c7aa0ed90b3e5e0517fb5fa95d9ec8be0db03befdc7232a799","plugins/railway/skills/use-railway/references/analyze-db-postgres.md":"8c71a39dac66ea434b11b315b1df1363f07927768bbf5c5298387aab231f44ff","plugins/railway/skills/use-railway/references/analyze-db-redis.md":"5cc56fbf787b8c1a87641c72f4fd48f1c513d38726dc501aaa3575496afcffc0","plugins/railway/skills/use-railway/references/analyze-db.md":"15062ec729ca6102a6b72c97940a5cab4a74e59fdc9754e61725904508caaf20","plugins/railway/skills/use-railway/references/cloud-agents.md":"285d0274f7830c8b8e83b2625bc57225ff4896627c9d25e1ab0f91968803d977","plugins/railway/skills/use-railway/references/configure.md":"8b3f6f00bc218ad9d23e7bf25e85c95e24ef898d20a1f9e98c32a4d3a209dcab","plugins/railway/skills/use-railway/references/databases.md":"badf2bfc0924074d1d40956a0363d5bbc607b6b8199ab4696cf8b96c047913a9","plugins/railway/skills/use-railway/references/deploy.md":"98c7dbf9b0632c01182d084e3f4e0623e2d5b2003990beec3901fe8f0b6d345a","plugins/railway/skills/use-railway/references/feature-flags.md":"2385092bac17589fe4528942e732f1dabc47da27486f7d6941b8fbea4357f8b9","plugins/railway/skills/use-railway/references/iac.md":"0dbc849875326eae823766fce908f0f36fb8def82dfc1c86ae21f9e1f8125b8a","plugins/railway/skills/use-railway/references/operate.md":"ce9c4b7a7c80be19ff8e8bfd3c7a84e60a44e2070325deebc4771f352a3041c6","plugins/railway/skills/use-railway/references/request.md":"4fb17ecbf4f6353091af26f234efe86644b5e52660818ac50284649fadecc120","plugins/railway/skills/use-railway/references/sandbox.md":"4d82223eccddcc85bbe8027c1088d2928fdcb384124f09f394d5414641b9f004","plugins/railway/skills/use-railway/references/setup.md":"0f7a7f52cba0d4109190666b86485c5c2d38bb18b6e865ac56e850e05626c3eb","plugins/railway/skills/use-railway/references/tracing.md":"7e9aad106ffd896f92a0dfad9f2b76e5b403142241b5d6bdc9611c58be43ceb4","plugins/railway/skills/use-railway/references/usage.md":"428b33b231fa3708bf1e60dfa9120962ff5d8afa73af5f51c5b3d956eef6463e","plugins/railway/skills/use-railway/scripts/analyze-mongo.py":"0ad9ded1dae89afc32959c13861234881a2df47199d3ad12a940ce2018b6088a","plugins/railway/skills/use-railway/scripts/analyze-mysql.py":"daf7c87434326c3e3c9af644a76a3d3602bb8cef24a51da3e957763ee4b1e2b6","plugins/railway/skills/use-railway/scripts/analyze-postgres.py":"4fca72278e9e6135b79cbc58d7d4b2ff1e1c57c0fb31ba1e8cc5954d280fd97f","plugins/railway/skills/use-railway/scripts/analyze-redis.py":"42a24cef643539a6dc5815d28e84d20dfd6439015d0f086dfd7aafc4786a71cc","plugins/railway/skills/use-railway/scripts/dal.py":"fe74d383242446c04c8b60bd3ca89441f2d9fe56ee5ceb8493d5c0b5cc30e640","plugins/railway/skills/use-railway/scripts/enable-pg-stats.py":"eea271c4eb7e794920cfee2a5ba98c892ae75b9d126522d9b79f315d1e7058cd","plugins/railway/skills/use-railway/scripts/pg-extensions.py":"443b34c6fe7418090e426a8830062106f4f89309a754c684d7b9e720e443fc9d","plugins/railway/skills/use-railway/scripts/railway-api.sh":"45e9f397ed733f6f3a0e55476d0824eff86b30371be2699c55ffbefb3b28b9b0"}
lockfiles
["LOCK.json"]
utc date
2026-10-19T15:16:05Z
source date
2026-10-16
discovered date
2026-10-16
retested date
2026-10-19
reviewed date
2026-10-19
published date
2026-10-19
modified date
2026-10-19
reviewer
Machine-checked
harness version
toolwitness harness at commit 11dde7217ae6f8e4ac4d18a6380b18ba01450122
claude code version
Not applicable: static source inspection (commands.json).
model id
Not applicable: static source inspection (commands.json).
scanner version
Not applicable: static source inspection.
rulepack version
Not applicable: static source inspection.
agents
[]
commands
["Ran 42 git commands; each one's exit status and output hash is in commands.json. Scope: acquisition and static inspection."]
prompt list
["Not applicable: static source inspection (commands.json)."]
history
["2026-10-19T15:16:05Z: pinned source inspection"]
application
{"applicationCategory":"DeveloperApplication","name":"railway — 1 hook","operatingSystem":"Not exercised","softwareVersion":"a100f93e482c5153774fed74d0b3fb8f8ca63342"}
review input
{"claims":[{"field":"summary","id":"acquired","sources":["LOCK.json","listing.json","commands.json"],"text":"Pinned source declarations and file hashes were listed."},{"field":"outcome","id":"listed","sources":["LOCK.json","listing.json","commands.json"],"text":"Listed 1 hook declaration. Ran 42 git commands; each one's exit status and output hash is in commands.json. Scope: acquisition and static inspection."},{"field":"rule_results.0","id":"tree","sources":["LOCK.json","listing.json","commands.json"],"text":"The retained source tree matches its acquisition manifest."},{"field":"rule_results.1","id":"declared","sources":["LOCK.json","listing.json","commands.json"],"text":"Declared hook names (listing.json): PreToolUse"}],"evidence_sha256":{"LOCK.json":"fe3994696c479bf54d74601e0a0113ece2b090224684c71c7039e0646e4616d1","commands.json":"0f1adb73c1f97099fb6fa37a3931f19d9534ecf4ccc9f782c713a60c88d037e8","complete.json":"91b504b43905fdc009504d516c45eea831f39a1995b9e7d69987c9756c936d6f","identity.json":"b3fdff6e21afd6b95be405870b69bd85ab8e9a3e30c2d26e601466da1e02e63c","listing.json":"65a283b9371a5426b11b992b7d9a93797b1d046662fc73cd31f5ab9cd212ac02","selection.json":"41766fd4a9c6175d70545cb5ea218f02b12fe89c6528308986313c43799abc62"},"identity_artifact":"identity.json"}
review
{"codex":"2f621be2e9e292c8ba0189680c7f06bf8a32e1524ada11637c3431d48058a9f1","date":"2026-10-19","gates":"ec1c70c694e3398a914b816657a9e205eda8c28e1c73f38b0831c558af80185b","grok":"268cf540366b47ee7d3bad4c23d95f007c87f1aeac40ac20a216a6601f10e802","kind":"machine-checked","reviewed_sha256":"4ca017deb6e5390d7b69b09bbfa4ff65d4ad892953d3a8558701ad4e8486cefc","summary":"Deterministic gates passed; every claim rebuilt from evidence with a reviewed template; Grok reported no standing refutation."}

Downloadable evidence

transcript

Download complete transcript

Ran 42 git commands; each one's exit status and output hash is in commands.json. Scope: acquisition and static inspection.

sinkhole log

Download complete sinkhole log

Not applicable: static source inspection (commands.json).

canary log

Download complete canary log

Not applicable: static source inspection (commands.json).

scanner output

Download complete scanner output

Not applicable: static source inspection (commands.json).

normalized text

Download complete normalized text

{
  "listing": {
    "skills": [
      {
        "path": "plugins/railway/skills/use-railway/SKILL.md",
        "name": "use-railway",
        "description": "Operate Railway infrastructure: sign up for or sign in to a Railway account, create projects, provision services, databases, and buckets, deploy code, configure infrastructure as code, environments and variables, manage domains, trace requests with OpenTelemetry, troubleshoot failures, check status and metrics, manage feature flags, database recovery and HA, cloud agents, usage limits, and Railway agent tooling. Use this skill whenever the user mentions Railway, feature flags, flag rollout, targeting rules, signing up, creating an account, registering, logging in, deployments, services, environments, buckets, object storage, tracing, traces, spans, OpenTelemetry, OTLP, build failures, agent setup, MCP, or infrastructure operations, even if they don't say \"Railway\" explicitly. Also invoke this skill when the user asks to be signed up, registered, or onboarded to Railway: do not refuse — drive them through the unauthed `railway up` flow (deploys + signs up on the fly) or `railway login` (which creates new accounts on the fly).\n",
        "files": {
          "plugins/railway/skills/use-railway/SKILL.md": "6cad29e016f02266a4d8439065e21d4e7200323e702095c58e7b6b951937ed9e",
          "plugins/railway/skills/use-railway/references/analyze-db-mongo.md": "52e4470b5893563d6a02411a005d8434e0d7668a0c53e188f8b542bc8f4bcfac",
          "plugins/railway/skills/use-railway/references/analyze-db-mysql.md": "281e01c4cac538c7aa0ed90b3e5e0517fb5fa95d9ec8be0db03befdc7232a799",
          "plugins/railway/skills/use-railway/references/analyze-db-postgres.md": "8c71a39dac66ea434b11b315b1df1363f07927768bbf5c5298387aab231f44ff",
          "plugins/railway/skills/use-railway/references/analyze-db-redis.md": "5cc56fbf787b8c1a87641c72f4fd48f1c513d38726dc501aaa3575496afcffc0",
          "plugins/railway/skills/use-railway/references/an

Excerpt shown; complete evidence is in the download.

Download full record JSON

Disclaimer

This record lists declarations and file hashes from a pinned source tree. Git command results from acquisition and static inspection are retained in commands.json. Scope: acquisition and static inspection. It is not a security or quality verdict. Changed bytes are outside this record.

Template placeholders refer to the snapshot metadata above.

Page updated