Skip to content

Latest commit

 

History

History
191 lines (181 loc) · 45 KB

File metadata and controls

191 lines (181 loc) · 45 KB

Configuration And Packaged Assets

Implementation sources read 107 environment-variable names. The package ships 41 recipes and 1 recipe bundles; the repository also maintains 17 workflow fixtures/templates.

Environment variables

Variable Readers
AIRTABLE_API_KEY src/core/modules/third_party/productivity/airtable.py:142, src/core/modules/third_party/productivity/airtable.py:309, src/core/modules/third_party/productivity/airtable.py:474
ANTHROPIC_API_KEY src/core/enterprise/ai_native/impl.py:89, src/core/modules/third_party/ai/agents/llm_client.py:69, src/core/modules/third_party/ai/services.py:186
AWS_ACCESS_KEY_ID src/core/modules/third_party/cloud/aws/s3_delete.py:105, src/core/modules/third_party/cloud/aws/s3_download.py:104, src/core/modules/third_party/cloud/aws/s3_list.py:120, src/core/modules/third_party/cloud/aws/s3_upload.py:115, src/core/modules/third_party/cloud/storage.py:201, src/core/modules/third_party/cloud/storage.py:398
AWS_REGION src/core/modules/third_party/cloud/aws/s3_delete.py:104, src/core/modules/third_party/cloud/aws/s3_download.py:103, src/core/modules/third_party/cloud/aws/s3_list.py:119, src/core/modules/third_party/cloud/aws/s3_upload.py:114, src/core/modules/third_party/cloud/storage.py:203, src/core/modules/third_party/cloud/storage.py:400
AWS_SECRET_ACCESS_KEY src/core/modules/third_party/cloud/aws/s3_delete.py:106, src/core/modules/third_party/cloud/aws/s3_download.py:105, src/core/modules/third_party/cloud/aws/s3_list.py:121, src/core/modules/third_party/cloud/aws/s3_upload.py:116, src/core/modules/third_party/cloud/storage.py:202, src/core/modules/third_party/cloud/storage.py:399
AZURE_STORAGE_CONNECTION_STRING src/core/modules/third_party/cloud/azure.py:147, src/core/modules/third_party/cloud/azure.py:326
CONTROL_PLANE_URL src/core/engine/breakpoints/manager.py:487, src/core/engine/breakpoints/screenshot.py:182
DATABASE_URL src/core/modules/atomic/database/insert.py:102, src/core/modules/atomic/database/query.py:111, src/core/modules/atomic/database/update.py:96
DEPLOYMENT_MODE src/core/browser/driver.py:197, src/core/browser/driver.py:525, src/core/browser/driver.py:642, src/core/engine/breakpoints/manager.py:483, src/core/engine/breakpoints/screenshot.py:178, src/core/modules/atomic/browser/goto.py:109
DISCORD_WEBHOOK_URL src/core/modules/third_party/communication/messaging/discord.py:123
FIGMA_TOKEN examples/happy-test/test_figma.py:21, src/core/modules/atomic/verify/figma.py:214
FLYTO_ALLOWED_HOSTS src/core/utils.py:630
FLYTO_ALLOW_ABSOLUTE_PATHS src/core/utils.py:1181
FLYTO_ALLOW_CLIENT_DB_DSN src/core/modules/atomic/database/_dsn_guard.py:46
FLYTO_ALLOW_PORT_SCAN src/core/modules/atomic/port/check.py:159
FLYTO_ALLOW_PRIVATE_NETWORK src/core/utils.py:629
FLYTO_ALLOW_REMOTE_OLLAMA src/core/modules/third_party/ai/agents/llm_client.py:117, src/core/modules/third_party/ai/local_ollama.py:195
FLYTO_API_TOKEN src/core/api/security.py:108
FLYTO_API_URL src/cli/template.py:20
FLYTO_CORS_ORIGINS src/core/api/security.py:40
FLYTO_DEV_TOKEN scripts/mcp_tour_workspace.py:102
FLYTO_ENGINE_CALLBACK_URL src/core/verification_service.py:325, src/core/verification_service.py:340
FLYTO_ENGINE_URL src/core/verification_service.py:325, src/core/verification_service.py:341
FLYTO_ENV src/cli/modules.py:27, src/core/modules/runtime.py:34
FLYTO_ENV_VAR_ALLOWLIST src/core/module_policy.py:131
FLYTO_GRANTED_PERMISSIONS src/core/module_policy.py:176
FLYTO_HTTP_ALLOWED_PORTS src/core/utils.py:632
FLYTO_HTTP_DISABLE_SSRF_GUARD src/core/utils.py:709
FLYTO_MCP_ALLOW_LOCALHOST src/core/mcp_server.py:67
FLYTO_MODULE_ALLOWLIST src/core/module_policy.py:80
FLYTO_MODULE_DENYLIST src/core/module_policy.py:87
FLYTO_PLUGIN_ALLOWLIST src/core/module_policy.py:242
FLYTO_PLUGIN_DENYLIST src/core/module_policy.py:245
FLYTO_PLUGIN_GRANTS src/core/module_policy.py:231
FLYTO_RUNNER_SECRET src/core/verification_service.py:389, src/core/verification_service.py:425
FLYTO_SANDBOX_DIR src/core/utils.py:1180
FLYTO_SANDBOX_INHERIT_ENV src/core/safe_env.py:40
FLYTO_SESSION_IDLE_TIMEOUT_S src/core/session_reaper.py:37
FLYTO_STORAGE_DIR src/core/modules/atomic/storage/kv.py:25
FLYTO_TEST_EMAIL scripts/mcp_drive_login.py:87, scripts/mcp_find_orgid.py:50, scripts/mcp_grab_ctem_error.py:41, scripts/mcp_grab_ctem_html.py:53, scripts/mcp_tour.py:116, scripts/mcp_tour_ctem_uglies.py:86, scripts/mcp_tour_custom_picker.py:145, scripts/mcp_tour_projecttype.py:134, scripts/mcp_tour_workspace.py:100
FLYTO_TEST_ORG_ID scripts/mcp_tour.py:185
FLYTO_TEST_PASSWORD scripts/mcp_drive_login.py:88, scripts/mcp_find_orgid.py:53, scripts/mcp_grab_ctem_error.py:42, scripts/mcp_grab_ctem_html.py:54, scripts/mcp_tour.py:117, scripts/mcp_tour_ctem_uglies.py:87, scripts/mcp_tour_custom_picker.py:146, scripts/mcp_tour_projecttype.py:135, scripts/mcp_tour_workspace.py:101
FLYTO_TOKEN src/cli/template.py:25
FLYTO_TRUSTED_CALLBACK_HOSTS src/core/verification_service.py:371
FLYTO_TRUSTED_LLM_HOSTS src/core/utils.py:1045
FLYTO_VALIDATION_MODE examples/demo_video/record.py:21, examples/demo_video/record_fast.py:18, scripts/generate_catalog.py:19, scripts/lint_modules.py:757, src/core/modules/registry/validation_types.py:91, src/core/quickstart.py:22
FLYTO_VERIFICATION_API_KEY src/core/verification_service.py:424
FLYTO_VERIFICATION_SECRET src/core/verification_service.py:389, src/core/verification_service.py:426
FLYTO_VSCODE_LOCAL_MODE src/core/utils.py:635
GCS_SCREENSHOT_BUCKET src/core/engine/breakpoints/screenshot.py:72, src/core/engine/breakpoints/screenshot.py:189
GITHUB_TOKEN src/core/modules/third_party/developer/github.py:153, src/core/modules/third_party/developer/github.py:304, src/core/modules/third_party/developer/github.py:445, src/core/modules/third_party/developer/github.py:623, src/core/modules/third_party/developer/github.py:789
GOOGLE_AI_API_KEY src/core/modules/third_party/ai/agents/llm_client.py:77, src/core/modules/third_party/ai/services.py:364
GOOGLE_API_KEY src/core/modules/third_party/developer/http/search.py:107
GOOGLE_CREDENTIALS_JSON src/core/modules/third_party/productivity/tools/sheets_read.py:148, src/core/modules/third_party/productivity/tools/sheets_write.py:139
GOOGLE_SEARCH_ENGINE_ID src/core/modules/third_party/developer/http/search.py:108
HEADLESS src/core/modules/atomic/browser/launch.py:188
IMAP_HOST src/core/modules/atomic/communication/email_read.py:100
IMAP_PASSWORD src/core/modules/atomic/communication/email_read.py:103
IMAP_PORT src/core/modules/atomic/communication/email_read.py:101
IMAP_USER src/core/modules/atomic/communication/email_read.py:102
JIRA_API_TOKEN src/core/modules/integrations/jira/integration.py:57, src/core/modules/integrations/jira/modules/create_issue.py:142, src/core/modules/integrations/jira/modules/search_issues.py:98
JIRA_DOMAIN src/core/modules/integrations/jira/integration.py:55
JIRA_EMAIL src/core/modules/integrations/jira/integration.py:56, src/core/modules/integrations/jira/modules/create_issue.py:141, src/core/modules/integrations/jira/modules/search_issues.py:97
KEY src/core/modules/quality/detectors/capability_detector.py:108
MONGODB_URL src/core/modules/third_party/database/connectors/mongodb_find.py:102, src/core/modules/third_party/database/connectors/mongodb_insert.py:102
MYSQL_DATABASE src/core/modules/atomic/database/insert.py:218, src/core/modules/atomic/database/query.py:212, src/core/modules/atomic/database/update.py:214, src/core/modules/third_party/database/connectors/mysql.py:119
MYSQL_HOST src/core/modules/atomic/database/insert.py:216, src/core/modules/atomic/database/query.py:210, src/core/modules/atomic/database/update.py:212, src/core/modules/third_party/database/connectors/mysql.py:101
MYSQL_PASSWORD src/core/modules/atomic/database/insert.py:220, src/core/modules/atomic/database/query.py:214, src/core/modules/atomic/database/update.py:216, src/core/modules/third_party/database/connectors/mysql.py:118
MYSQL_PORT src/core/modules/atomic/database/insert.py:217, src/core/modules/atomic/database/query.py:211, src/core/modules/atomic/database/update.py:213
MYSQL_USER src/core/modules/atomic/database/insert.py:219, src/core/modules/atomic/database/query.py:213, src/core/modules/atomic/database/update.py:215, src/core/modules/third_party/database/connectors/mysql.py:117
NOTION_API_KEY src/core/modules/third_party/productivity/tools/notion_create_page.py:117, src/core/modules/third_party/productivity/tools/notion_query.py:130
OLLAMA_API_URL src/core/modules/atomic/vector/embeddings.py:130
OPENAI_API_KEY src/core/enterprise/ai_native/impl.py:80, src/core/modules/atomic/ai/embed.py:179, src/core/modules/atomic/llm/code_fix.py:125, src/core/modules/atomic/ui/evaluate.py:229, src/core/modules/atomic/vector/embeddings.py:87, src/core/modules/atomic/vector/embeddings.py:109, src/core/modules/atomic/vision/analyze.py:150, src/core/modules/atomic/vision/compare.py:140, src/core/modules/third_party/ai/agents/llm_client.py:63, src/core/modules/third_party/ai/openai_integration.py:168, src/core/modules/third_party/ai/openai_integration.py:366
PLAYWRIGHT_NODEJS_PATH src/core/browser/driver.py:136, src/core/browser/driver.py:139
POSTGRESQL_URL src/core/modules/third_party/database/connectors/postgresql.py:96
POSTGRES_DB src/core/modules/atomic/database/insert.py:159, src/core/modules/atomic/database/query.py:147, src/core/modules/atomic/database/update.py:151
POSTGRES_HOST src/core/modules/atomic/database/insert.py:157, src/core/modules/atomic/database/query.py:145, src/core/modules/atomic/database/update.py:149
POSTGRES_PASSWORD src/core/modules/atomic/database/insert.py:161, src/core/modules/atomic/database/query.py:149, src/core/modules/atomic/database/update.py:153
POSTGRES_PORT src/core/modules/atomic/database/insert.py:158, src/core/modules/atomic/database/query.py:146, src/core/modules/atomic/database/update.py:150
POSTGRES_USER src/core/modules/atomic/database/insert.py:160, src/core/modules/atomic/database/query.py:148, src/core/modules/atomic/database/update.py:152
PYTHONPATH src/cli/main.py:26
QDRANT_API_KEY src/core/modules/atomic/vector/connector.py:49, src/core/modules/atomic/vector/connector.py:57, src/core/modules/atomic/vector/connector.py:258
QDRANT_MODE src/core/modules/atomic/vector/connector.py:47
QDRANT_PATH src/core/modules/atomic/vector/connector.py:50
QDRANT_URL src/core/modules/atomic/vector/connector.py:48, src/core/modules/atomic/vector/connector.py:257
REDIS_HOST src/core/modules/third_party/database/redis.py:91, src/core/modules/third_party/database/redis.py:217
REDIS_URL src/core/engine/breakpoints/manager.py:500
SALESFORCE_ACCESS_TOKEN src/core/modules/integrations/salesforce/integration.py:68, src/core/modules/integrations/salesforce/modules/create_record.py:109, src/core/modules/integrations/salesforce/modules/query.py:109, src/core/modules/integrations/salesforce/modules/update_record.py:97
SALESFORCE_CLIENT_ID src/core/modules/integrations/salesforce/integration.py:65
SALESFORCE_CLIENT_SECRET src/core/modules/integrations/salesforce/integration.py:66
SALESFORCE_INSTANCE_URL src/core/modules/integrations/salesforce/integration.py:61
SERPAPI_KEY src/core/modules/third_party/developer/http/search.py:185
SLACK_BOT_TOKEN src/core/modules/integrations/slack/integration.py:43, src/core/modules/integrations/slack/modules/list_channels.py:82, src/core/modules/integrations/slack/modules/send_message.py:114
SLACK_WEBHOOK_URL src/core/modules/atomic/communication/slack_send.py:94, src/core/modules/third_party/communication/messaging/slack.py:137
SMTP_FROM_EMAIL src/core/modules/atomic/communication/email_send.py:117
SMTP_HOST src/core/modules/atomic/communication/email_send.py:106
SMTP_PASSWORD src/core/modules/atomic/communication/email_send.py:109
SMTP_PORT src/core/modules/atomic/communication/email_send.py:107
SMTP_USER src/core/modules/atomic/communication/email_send.py:108
SQLITE_DATABASE src/core/modules/atomic/database/insert.py:270, src/core/modules/atomic/database/query.py:277, src/core/modules/atomic/database/update.py:266
STRIPE_API_KEY src/core/modules/third_party/payment/stripe.py:158, src/core/modules/third_party/payment/stripe.py:290, src/core/modules/third_party/payment/stripe.py:426
TAVILY_API_KEY src/core/modules/third_party/developer/http/search.py:291
TELEGRAM_BOT_TOKEN src/core/modules/third_party/communication/messaging/telegram.py:132
TWILIO_ACCOUNT_SID src/core/modules/third_party/communication/twilio.py:148, src/core/modules/third_party/communication/twilio.py:310
TWILIO_AUTH_TOKEN src/core/modules/third_party/communication/twilio.py:149, src/core/modules/third_party/communication/twilio.py:311
WEBHOOK_SIGNING_KEY src/core/modules/integrations/base/webhook.py:19
WORKER_AUTH_TOKEN src/core/engine/breakpoints/manager.py:492, src/core/engine/breakpoints/screenshot.py:184

Packaged recipes

Asset Name Steps
src/recipes/api-pipeline.yaml:1 API Pipeline 5
src/recipes/change-detector.yaml:1 Website Change Detector 6
src/recipes/competitor-intel.yaml:1 Competitor Intel 12
src/recipes/csv-to-json.yaml:1 CSV to JSON 3
src/recipes/demo-scrape.yaml:1 Demo: Web Scraping with Trace 11
src/recipes/docker-ps.yaml:1 Docker Containers 1
src/recipes/flyto2-public-site-verification.yaml:1 Flyto2 Public Site Verification 3
src/recipes/flyto2-ui-login-smoke.yaml:1 Flyto2 UI Login Smoke 16
src/recipes/flyto2-ui-smoke.yaml:1 Flyto2 UI Smoke 14
src/recipes/form-fill-review.yaml:1 Form Auto-Fill with Review 8
src/recipes/form-fill.yaml:1 Form Fill 6
src/recipes/full-audit.yaml:1 Full Audit 12
src/recipes/git-changelog.yaml:1 Git Diff 1
src/recipes/github-issue.yaml:1 GitHub Issue from Screenshot 5
src/recipes/http-get.yaml:1 HTTP GET 3
src/recipes/image-compress.yaml:1 Image Compress 1
src/recipes/image-convert.yaml:1 Image Convert 1
src/recipes/image-resize.yaml:1 Image Resize 1
src/recipes/json-to-csv.yaml:1 JSON to CSV 1
src/recipes/monitor-site.yaml:1 Monitor Site 1
src/recipes/new-posting-alert.yaml:1 New Posting Alert 5
src/recipes/ocr.yaml:1 OCR 2
src/recipes/page-to-pdf.yaml:1 Page to PDF 4
src/recipes/pdf-extract.yaml:1 PDF Extract 2
src/recipes/port-scan.yaml:1 Port Scan 1
src/recipes/price-drop-alert.yaml:1 Price Drop Alert 5
src/recipes/responsive-report.yaml:1 Responsive Report 9
src/recipes/scrape-links.yaml:1 Scrape Links 5
src/recipes/scrape-page.yaml:1 Scrape Page 6
src/recipes/scrape-table.yaml:1 Scrape Table 6
src/recipes/scrape-to-csv.yaml:1 Scrape to CSV 6
src/recipes/scrape-to-slack.yaml:1 Scrape to Slack 5
src/recipes/screenshot.yaml:1 Screenshot 5
src/recipes/site-audit.yaml:1 Site Audit 7
src/recipes/social-monitor.yaml:1 Social Media Monitor 6
src/recipes/stock-price.yaml:1 Stock Price 6
src/recipes/visual-snapshot.yaml:1 Visual Snapshot 7
src/recipes/warroom-deterministic-audit.yaml:1 Deterministic Verification Replay 12
src/recipes/web-perf.yaml:1 Web Performance 4
src/recipes/webpage-archive.yaml:1 Webpage Archive 7
src/recipes/whois.yaml:1 WHOIS Lookup 1

Packaged recipe bundles

Asset Name Steps
src/recipe_bundles/flyto2-warroom-smoke.yaml:1 flyto2-warroom-smoke 0

Maintained workflow files

Asset Name Steps
workflows/_test/test_chaining.yaml:1 Variable Chaining Test 2
workflows/_test/test_text_reverse.yaml:1 Text Reverse Test 1
workflows/pentests/access_control.yaml:1 Access Control Test 9
workflows/pentests/auth_session.yaml:1 Authentication & Session Test 7
workflows/pentests/business_logic.yaml:1 Business Logic & Validation Test 5
workflows/pentests/client_side.yaml:1 Client-Side Attack Test 7
workflows/pentests/code_injection.yaml:1 Code & Command Injection Test 5
workflows/pentests/deserialization.yaml:1 Deserialization & SSTI Test 4
workflows/pentests/file_misconfig.yaml:1 Files & Misconfiguration Test 6
workflows/pentests/hardening.yaml:1 Hardening Test 6
workflows/pentests/llm_injection.yaml:1 LLM & Prompt Injection Test 3
workflows/pentests/registry.yaml:1 pentest_registry 0
workflows/pentests/secrets_crypto.yaml:1 Secrets & Cryptography Test 6
workflows/pentests/sql_injection.yaml:1 SQL & Database Injection Test 8
workflows/pentests/ssrf.yaml:1 SSRF Test 3
workflows/scrape_chatgpt_share.yaml:1 Scrape ChatGPT Share Conversation 9
workflows/security_audit.yaml:1 Domain Security Audit 14