deploy-cluster
Pass
Audited by Gen Agent Trust Hub on May 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The
scripts/deploy.pyscript executes infrastructure management commands usingsubprocess.run(). By passing arguments as a list rather than a shell string, the skill avoids common command injection vulnerabilities while interacting withgcloud,kubectl, andsky.- [EXTERNAL_DOWNLOADS]: The skill identifiesskypilotas a prerequisite for installation viapip. It also utilizes official, well-known Google Cloud TPU container images for the compute environment, which are trusted sources for this functionality.- [SAFE]: The skill manages local configuration files such as~/.sky/config.yamland.cluster_name_tpu. These operations are used to maintain the state and environment for the SkyPilot clusters and are performed transparently with backups of existing configurations.
Audit Metadata