ops-chutes
Pass
Audited by Gen Agent Trust Hub on Mar 17, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns detected. The skill performs intended operations for resource management and monitoring.
- [DATA_EXFILTRATION]: The skill accesses API tokens (CHUTES_API_TOKEN, DEEPSEEK_API_KEY) from environment variables or local .env files to authenticate with services. Network activity is restricted to official API domains (api.chutes.ai, llm.chutes.ai, api.deepseek.com) for the purpose of checking usage and balance.
- [COMMAND_EXECUTION]: The run.sh and sanity.sh scripts facilitate dependency management and environment setup using standard tools like uv and pip within a local virtual environment. This is consistent with common practice for skill initialization.
- [REMOTE_CODE_EXECUTION]: No patterns for downloading and executing untrusted remote code or scripts were found.
Audit Metadata