flyio-debug-bundle
Pass
Audited by Gen Agent Trust Hub on Sep 13, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill makes requests to
api.machines.devandstatus.flyio.net. These are official, well-known API and status endpoints for the Fly.io platform and are required for the skill's diagnostic purpose. - [DATA_EXPOSURE_AND_EXFILTRATION]: The skill captures application logs, machine status, and volume configurations. It mitigates exposure risks by including explicit manual review steps to redact tokens, credentials, and request bodies before the final archive is created.
- [INDIRECT_PROMPT_INJECTION]:
- Ingestion points: Application logs are ingested via the
fly logscommand in the debug script. - Boundary markers: The instructions explicitly separate the collection phase from the analysis phase, requiring a manual review of logs.
- Capability inventory: Uses
Bashfor command execution,Grepfor searching, andReadfor file access. - Sanitization: The skill provides clear instructions to redact sensitive data and personal identifiers from the collected evidence before it is stored or shared.
Audit Metadata