fly-io
Fail
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: HIGHREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill instructs the user to install the Fly.io CLI by piping a remote script to the shell:
curl -L https://fly.io/install.sh | sh. This is an official installation method from a well-known service provider. - [EXTERNAL_DOWNLOADS]: Fetches the
flyctlbinary from Fly.io and references thesuperfly/flyctl-actionsGitHub Action for automated deployments. - [COMMAND_EXECUTION]: Utilizes various shell commands including
flyctl,openssl,pg_dump, andpg_restoreto manage deployments and databases. - [INDIRECT_PROMPT_INJECTION]: The skill uses variable placeholders (e.g.,
{project-name},{dbname}) that are interpolated into shell commands, representing a potential injection surface if malicious values are provided to the agent. - Ingestion points: User-provided values for project and database names in
SKILL.md,examples.md, andreference.md. - Boundary markers: None; the skill relies on standard command line syntax.
- Capability inventory: Includes full application deployment, database modifications, and secret management through the
flyctlCLI and system tools likeopenssl. - Sanitization: No specific input validation or sanitization logic is implemented in the instructional content.
Recommendations
- HIGH: Downloads and executes remote code from: https://fly.io/install.sh - DO NOT USE without thorough review
Audit Metadata