---
title: "wom.womr-rail-anchor"
description: "In-band rail-anchor breach warning for womr."
canonical: https://agentpluginsdirectory.com/plugins/wom.womr-rail-anchor
last-updated: 2026-10-07
---

# wom.womr-rail-anchor
In-band rail-anchor breach warning for womr.
- Slug: wom.womr-rail-anchor
- Publisher: wommy
- Repository: https://github.com/wommy/agents-wom-plugins
- Manifest: womr-rail-anchor/plugin.json
- Version: 0.1.0
- License: MIT
- Category (editorial): security
- Skills: 1 (rail-anchor)
- MCP servers: 0
- Stars: 0
- Repository created: 2026-08-24
- Repository last pushed: 2026-08-25
- Publisher type: User
- Listing: https://agentpluginsdirectory.com/plugins/wom.womr-rail-anchor
- Schema: https://agent-plugins.org/schemas/1.0.0/plugin.schema.json

## What wom.womr-rail-anchor does, in the publisher's words

Puts bun womr.ts lanes doctor's verdict in front of the agent at the moment of use.

A thin adapter. It does not detect anything itself.

- Detection → lanes doctor (the rail). 268 links scanned, with self / foreign / dangling / unauthorized / pnpm-store classes.
- Parsing → the toon CLI (@toon-format/cli), which decodes the receipt to typed JSON.
- This plugin → decides breach-vs-blind from the decoded payload, and delivers it.

An earlier version scanned node_modules itself: 20 links against the rail's 268, and without any of the rail's classes. It existed only because lanes doctor was returning 96 false unauthorized findings from a non-canonicalised pnpm store root, a bug, since fixed. A hand-rolled TOON regex parser was also written here and thrown away once toon -d was found. Both are the same mistake: reimplementing an authority that already works.

From the project README, punctuation lightly normalized. Full text: https://raw.githubusercontent.com/wommy/agents-wom-plugins/HEAD/womr-rail-anchor/README.md

## Skills

- rail-anchor: Use when bun womr.ts gives a surprising result, a rail verb seems missing, node_modules links look wrong, or a finding depends on rail behaviour. Covers anchor breaches, why an empty scan is a breach, and why lanes doctor is the authority.

Descriptions come from the frontmatter of each SKILL.md, punctuation lightly normalized.