skypilot
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONPRIVILEGE_ESCALATION
Full Analysis
- [COMMAND_EXECUTION]: The skill facilitates the execution of various
skyCLI commands to manage cloud infrastructure, launch clusters, and monitor jobs. It also includes shell-based workflows for bootstrapping the environment and running distributed training tasks. - [EXTERNAL_DOWNLOADS]: Instructions include installing the SkyPilot package from PyPI and deploying the SkyPilot API server using Helm charts from the official vendor repository (
https://helm.skypilot.co). These are legitimate vendor resources used for the tool's installation and configuration. - [REMOTE_CODE_EXECUTION]: The core functionality of the skill is to orchestrate the execution of user-defined
setupandrunscripts on remote cloud virtual machines and Kubernetes pods. This behavior is the primary intended purpose of the SkyPilot tool. - [PRIVILEGE_ESCALATION]: The documentation includes the use of
sudo apt-getfor installing necessary build dependencies (likebuild-essentialandninja-build) required for certain AI libraries. This is a standard administrative task in the context of setting up machine learning environments.
Audit Metadata