fly-io

Fail

Audited by Gen Agent Trust Hub on Sep 21, 2026

Risk Level: HIGHREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [REMOTE_CODE_EXECUTION]: The skill instructs the user to install the Fly.io CLI by piping a remote script to the shell: curl -L https://fly.io/install.sh | sh. This is an official installation method from a well-known service provider.
  • [EXTERNAL_DOWNLOADS]: Fetches the flyctl binary from Fly.io and references the superfly/flyctl-actions GitHub Action for automated deployments.
  • [COMMAND_EXECUTION]: Utilizes various shell commands including flyctl, openssl, pg_dump, and pg_restore to manage deployments and databases.
  • [INDIRECT_PROMPT_INJECTION]: The skill uses variable placeholders (e.g., {project-name}, {dbname}) that are interpolated into shell commands, representing a potential injection surface if malicious values are provided to the agent.
  • Ingestion points: User-provided values for project and database names in SKILL.md, examples.md, and reference.md.
  • Boundary markers: None; the skill relies on standard command line syntax.
  • Capability inventory: Includes full application deployment, database modifications, and secret management through the flyctl CLI and system tools like openssl.
  • Sanitization: No specific input validation or sanitization logic is implemented in the instructional content.
Recommendations
  • HIGH: Downloads and executes remote code from: https://fly.io/install.sh - DO NOT USE without thorough review
Audit Metadata
Risk Level
HIGH
Analyzed
Sep 21, 2026, 03:02 AM