flyio-install-auth
Pass
Audited by Gen Agent Trust Hub on Sep 13, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill provides instructions to download and execute the official Fly.io installation script using
curl -L https://fly.io/install.sh | sh. This is a common installation method for this well-known service. - [COMMAND_EXECUTION]: The skill utilizes shell commands for managing authentication and interacting with the Fly.io CLI (
flyctl), including retrieving tokens and configuring environment variables. - [INDIRECT_PROMPT_INJECTION]: The skill documents a surface where the agent processes data fetched from an external API.
- Ingestion points: The agent retrieves application data from
https://api.machines.dev/v1/appsin the provided Typescript example. - Boundary markers: No specific boundary markers or instructions to ignore embedded content are used in the data processing example.
- Capability inventory: The skill has access to bash execution, file reading, and network operations.
- Sanitization: The example demonstrates direct logging of API response fields (e.g.,
app.name) to the console without explicit sanitization.
Audit Metadata