vast-gpu
Pass
Audited by Gen Agent Trust Hub on Jul 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill relies on the
Bash(*)tool to execute local commands via thevastaiCLI and remote commands viassh. This allows for broad system interaction necessary for cloud infrastructure management.\n- [COMMAND_EXECUTION]: The skill usesssh -o StrictHostKeyChecking=noto connect to remote instances. This configuration disables host key verification, which facilitates connections to dynamic IP addresses but increases susceptibility to man-in-the-middle (MITM) attacks.\n- [PROMPT_INJECTION]: The skill identifies an indirect prompt injection surface by ingesting untrusted local data to parameterize shell commands.\n - Ingestion points: Reads task requirements and hardware hints from
refine-logs/EXPERIMENT_PLAN.mdand local scripts (.py, .yaml, .json) during the Provision action.\n - Boundary markers: Absent. The skill interprets content from these files as authoritative instructions for configuring GPU searches and setup routines.\n
- Capability inventory: Uses
Bash(*)for local CLI execution,sshfor remote command execution, andrsyncfor file synchronization.\n - Sanitization: Absent. Extracted values are interpolated directly into shell command templates (e.g., in
vastai search offers).
Audit Metadata