aris-compute-guard
Pass
Audited by Gen Agent Trust Hub on May 6, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: Executes various shell commands to inspect system hardware and remote compute status.
- Evidence: Uses
nvidia-smiandsshto query GPU memory usage and connectivity. - Evidence: Invokes vendor-specific CLI tools including
vastaiandmodalto verify infrastructure availability. - Evidence: Executes dynamic Python snippets to verify PyTorch CUDA/MPS compatibility.
- [PROMPT_INJECTION]: Vulnerable to indirect prompt injection through unvalidated project configuration files.
- Ingestion points: Reads target environment settings and server hostnames from
CLAUDE.md(Step 1). - Boundary markers: Absent. The skill does not implement delimiters or instructions to ignore malicious commands embedded within the config file.
- Capability inventory: The skill has permissions to execute
sshandpythonbased on the parsed configuration. - Sanitization: No explicit validation or escaping of hostnames or environment variables is performed before interpolation into shell command templates.
Audit Metadata