flyio
Pass
Audited by Gen Agent Trust Hub on May 9, 2026
Risk Level: SAFE
Full Analysis
- [CREDENTIALS_UNSAFE]: The skill manages a Fly.io API token by storing it in a local configuration file at
~/.config/flyio/token. Thesave_token.rbscript implements secure file handling by creating the directory if it doesn't exist and setting the file permissions to0600(read/write only by the owner), which is the industry standard for protecting sensitive credentials. - [EXTERNAL_DOWNLOADS]: The skill communicates with the official Fly.io Machines API endpoint at
api.machines.dev. These requests are necessary for the skill's stated purpose of managing Fly.io resources and are directed to a well-known service provider. - [COMMAND_EXECUTION]: Infrastructure management is performed by executing local Ruby scripts that utilize the standard library. The skill instructions explicitly require human confirmation before any destructive or resource-allocating actions (like creating, updating, or deleting machines and apps) are performed.
Audit Metadata