alterlab-remote-compute
Pass
Audited by Gen Agent Trust Hub on Jul 6, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill executes system commands (
sbatch,sacct,scancel) viasubprocess.runto interact with SLURM schedulers. This is the core functionality and is implemented using list-based arguments to prevent shell injection. - [EXTERNAL_DOWNLOADS]: The dispatcher interacts with remote REST APIs (e.g., RunPod, Google Cloud) using
urllib.requestto submit job specifications and poll for status. This involves sending user-specified payload files to external endpoints, which is consistent with its role as a job dispatcher. - [SAFE]: The skill follows security best practices by explicitly prohibiting hardcoded credentials, instead requiring them to be provided via environment variables like
RUNPOD_API_KEY. It also uses standard libraries to minimize external dependency risks.
Audit Metadata