flyio-rate-limits
Pass
Audited by Gen Agent Trust Hub on Sep 13, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill provides utility functions such as
rollingDeployMachinesthat ingest untrusted data (machine configurations and application IDs) to perform network operations. This constitutes a standard injection surface for AI agents. - Ingestion points: The
appIdandconfigsparameters in therollingDeployMachinesTypeScript function. - Boundary markers: The skill does not explicitly define delimiters for the input data within the example code snippets.
- Capability inventory: The skill utilizes network capabilities via the global
fetchAPI to interact withapi.machines.dev. - Sanitization: No explicit sanitization or validation of the machine configurations is demonstrated in the examples; it assumes the input is pre-validated by the calling agent.
Audit Metadata