vastai-core-workflow-b

Pass

Audited by Gen Agent Trust Hub on Sep 13, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill implements logic to interact with the host system and remote instances via the vastai CLI and scp tool.
  • The provision_cluster function executes vastai search offers to query the marketplace for available hardware.
  • The SpotRecoveryManager class monitors instance status using vastai show instance and uses scp to transfer training checkpoints from the local /workspace/checkpoints directory to newly provisioned replacement nodes.
  • The analyze_spending function retrieves billing data via vastai show invoices for cost aggregation.
  • The destroy_cluster function uses vastai destroy instance to terminate resources and stop billing.
  • All subprocess calls use list-based arguments rather than shell strings, which follows best practices for preventing command injection.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 13, 2026, 11:07 AM