together-dedicated-containers
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill implements the Sprocket worker framework which is designed to process untrusted data payloads from asynchronous task queues.
- Ingestion points: The
predict(self, args: dict)method inscripts/sprocket_hello_world.pyandreferences/sprocket-sdk.mdprocesses a payload directly from the queue client. - Boundary markers: No explicit delimiters or boundary markers are enforced by the framework to isolate instructions from data within the JSON payload.
- Capability inventory: The skill enables broad capabilities including container build-time shell command execution (
runinstructions inpyproject.toml), runtime file operations including automated uploads (sprocket.FileOutput), and network access to Together AI's API. - Sanitization: No input sanitization is provided in the library or templates; developers are responsible for validating and escaping incoming job payloads before use.
- [EXTERNAL_DOWNLOADS]: The skill facilitates the download of vendor-specific SDKs and well-known machine learning libraries.
- Installs the
sprocketSDK from the vendor's private registry athttps://pypi.together.ai/. - Recommends fetching CUDA-enabled PyTorch wheels from the official
pytorch.orgindex to support GPU workloads. - [COMMAND_EXECUTION]: The Jig CLI configuration in
references/jig-cli.mdallows users to define arbitrary shell commands within thepyproject.tomlfile under[tool.jig.image] runandcmdkeys. These commands are executed by thetogetherCLI tool during the Docker image build and container startup phases.
Audit Metadata