flash
Pass
Audited by Gen Agent Trust Hub on Aug 4, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs users to install the
runpod-flashpackage viauvorpip. This package is the core component of the tool and is authored by the same vendor as the skill, representing standard installation of the required SDK. - [REMOTE_CODE_EXECUTION]: The primary functionality of the skill is to serialize local Python function bodies and execute them on remote Runpod GPU/CPU workers. This is the intended behavior for a serverless compute platform and is facilitated through the
flashCLI tool. - [COMMAND_EXECUTION]: The skill utilizes several shell commands to manage the development cycle, including
flash devfor local hot-reloading,flash deployfor shipping artifacts, andcurlfor interacting with the local development server. Examples also demonstrate process management using backgrounding (&) andkillcommands. These are standard workflows for the described developer tool. - [CREDENTIALS_UNSAFE]: The documentation describes how to authenticate using
flash loginor theRUNPOD_API_KEYenvironment variable. While this involves sensitive credentials, the skill does not contain hardcoded secrets and correctly advises on standard authentication practices for the platform.
Audit Metadata