flash

Pass

Audited by Gen Agent Trust Hub on Aug 4, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs users to install the runpod-flash package via uv or pip. This package is the core component of the tool and is authored by the same vendor as the skill, representing standard installation of the required SDK.
  • [REMOTE_CODE_EXECUTION]: The primary functionality of the skill is to serialize local Python function bodies and execute them on remote Runpod GPU/CPU workers. This is the intended behavior for a serverless compute platform and is facilitated through the flash CLI tool.
  • [COMMAND_EXECUTION]: The skill utilizes several shell commands to manage the development cycle, including flash dev for local hot-reloading, flash deploy for shipping artifacts, and curl for interacting with the local development server. Examples also demonstrate process management using backgrounding (&) and kill commands. These are standard workflows for the described developer tool.
  • [CREDENTIALS_UNSAFE]: The documentation describes how to authenticate using flash login or the RUNPOD_API_KEY environment variable. While this involves sensitive credentials, the skill does not contain hardcoded secrets and correctly advises on standard authentication practices for the platform.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 4, 2026, 08:41 AM
Security Audit — agent-trust-hub — flash