vastai-core-workflow-b
Pass
Audited by Gen Agent Trust Hub on Sep 13, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill implements logic to interact with the host system and remote instances via the
vastaiCLI andscptool. - The
provision_clusterfunction executesvastai search offersto query the marketplace for available hardware. - The
SpotRecoveryManagerclass monitors instance status usingvastai show instanceand usesscpto transfer training checkpoints from the local/workspace/checkpointsdirectory to newly provisioned replacement nodes. - The
analyze_spendingfunction retrieves billing data viavastai show invoicesfor cost aggregation. - The
destroy_clusterfunction usesvastai destroy instanceto terminate resources and stop billing. - All subprocess calls use list-based arguments rather than shell strings, which follows best practices for preventing command injection.
Audit Metadata