infrastructure-skypilot
Pass
Audited by Gen Agent Trust Hub on Nov 3, 2026
Risk Level: SAFE
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill uses the legitimate 'skypilot' package from PyPI for orchestration. All execution patterns described are standard for the tool's intended use and do not involve untrusted remote scripts.
- [DATA_EXFILTRATION]: No sensitive data exposure or exfiltration patterns were detected. The instructions follow best practices by advising users to inherit credentials from the local environment or use SkyPilot's built-in secret management features.
- [COMMAND_EXECUTION]: Shell commands provided in the guide are standard for cluster management and do not include any suspicious or obfuscated parameters.
- [INDIRECT_PROMPT_INJECTION]: The skill processes structured YAML files for task configuration. While these files define execution logic, they are intended for use by developers in controlled environments, which is a standard pattern for infrastructure-as-code tools.
Audit Metadata