fly-io
Pass
Audited by Gen Agent Trust Hub on Oct 11, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns or security risks were detected. The skill provides legitimate documentation and configuration examples for Fly.io.
- [INDIRECT_PROMPT_INJECTION]: The skill assists in managing configuration files such as
fly.tomlandlitefs.yml(Ingestion points). While it lacks explicit boundary markers or sanitization, its primary purpose is instructional (Capability inventory: flyctl command examples). The attack surface is minimal as it does not perform automated execution on untrusted data. - [CREDENTIALS_UNSAFE]: The skill promotes secure credential management by instructing users to use
fly secrets setand specifically warning against committing secrets to version-controlled configuration files.
Audit Metadata