omh-inference-serving
Pass
Audited by Gen Agent Trust Hub on Nov 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill demonstrates strong security hygiene by explicitly instructing users to avoid hardcoding credentials in artifacts or runbooks, recommending the use of environment variables and named secrets (e.g.,
HF_TOKEN,VLLM_API_KEY). - [SAFE]: Deployment instructions for Docker prioritize network security by binding the serving port to the localhost interface (
127.0.0.1) by default and warning against exposing unauthenticated endpoints to uncontrolled networks. - [SAFE]: The workflow relies on standard, well-recognized industry tools (vLLM, llama.cpp, Kubernetes) and does not include any suspicious remote scripts, obfuscated code, or unauthorized network operations.
- [SAFE]: The instructions include clear 'Safety rules' and 'Quality bars' that emphasize observed verification and human-in-the-loop validation of deployment status.
Audit Metadata