fly-io
Fail
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: HIGHEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions for installing the Fly.io CLI tool (flyctl) using a remote shell script from fly.io. This is a common installation method for this platform.
- [REMOTE_CODE_EXECUTION]: The installation command
curl -L https://fly.io/install.sh | shdownloads and executes code directly in the shell. While originating from a well-known service, it represents a pattern of remote code execution. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to manage and deploy application configurations and secrets, creating a surface for indirect prompt injection through untrusted data sources.
- Ingestion points: Project configuration files (fly.toml), environment secrets, and application source code/Dockerfiles.
- Boundary markers: The instructions do not specify the use of delimiters or warnings to ignore embedded instructions within configuration data.
- Capability inventory: The skill enables full control over Fly.io resources including machine lifecycles, network settings, and persistent storage.
- Sanitization: The process relies on standard platform validation without additional sanitization of the input files within the agent's workflow.
Recommendations
- HIGH: Downloads and executes remote code from: https://fly.io/install.sh - DO NOT USE without thorough review
Audit Metadata