vastai-ci-integration
Pass
Audited by Gen Agent Trust Hub on Sep 13, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill includes instructions to install the
vastaiCLI tool usingpip. This is a standard dependency required for the service integration described in the skill.\n- [COMMAND_EXECUTION]: The skill provides scripts and workflow configurations that execute shell commands to manage GPU instances and SSH to run remote tests. These operations are standard for the intended CI/CD orchestration.\n- [INDIRECT_PROMPT_INJECTION]: The skill facilitates the generation of CI/CD pipeline configurations which process external command outputs.\n - Ingestion points: Workflow instructions and script templates in
SKILL.md.\n - Boundary markers: Not explicitly defined in the template instructions.\n
- Capability inventory: The skill uses
Bash(scoped tovastai) and generates scripts utilizingsubprocess.runandsshfor orchestration.\n - Sanitization: The generated Python scripts employ standard JSON parsing to handle outputs from the Vast.ai CLI, providing a layer of structured data validation.
Audit Metadata