vastai-hello-world
Pass
Audited by Gen Agent Trust Hub on Sep 13, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill follows security best practices by using environment variables (
$VASTAI_API_KEY) for authentication rather than hardcoding credentials. - [SAFE]: All external URLs and resources point to official service domains (
cloud.vast.ai,docs.vast.ai) or well-known public registries (PyTorch Docker image). - [SAFE]: The REST API implementation uses standard URL encoding for complex JSON query parameters, which is characteristic of the service's API and contains no malicious payloads.
- [SAFE]: The skill provides clear instructions for instance lifecycle management, including mandatory steps for resource destruction to prevent unintended costs.
Audit Metadata