deploy-cluster

Pass

Audited by Gen Agent Trust Hub on May 9, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The scripts/deploy.py script executes infrastructure management commands using subprocess.run(). By passing arguments as a list rather than a shell string, the skill avoids common command injection vulnerabilities while interacting with gcloud, kubectl, and sky.- [EXTERNAL_DOWNLOADS]: The skill identifies skypilot as a prerequisite for installation via pip. It also utilizes official, well-known Google Cloud TPU container images for the compute environment, which are trusted sources for this functionality.- [SAFE]: The skill manages local configuration files such as ~/.sky/config.yaml and .cluster_name_tpu. These operations are used to maintain the state and environment for the SkyPilot clusters and are performed transparently with backups of existing configurations.
Audit Metadata
Risk Level
SAFE
Analyzed
May 9, 2026, 08:40 AM