The Agent Skills Directory

[COMMAND_EXECUTION]: The skill facilitates the management of GPU hosting operations through the vastai CLI tool. It defines numerous subcommands for listing machines, setting prices, and managing maintenance windows. The skill explicitly prohibits the agent from performing runtime installations (pip install) or using direct API calls, which is a recommended security practice.
[INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from external sources, creating a potential injection surface.
Ingestion points: The vastai reports <id> command in SKILL.md retrieves data submitted by external renters.
Boundary markers: Absent. There are no instructions provided to wrap the output of renter reports in delimiters or to ignore potential instructions embedded within them.
Capability inventory: The agent has the ability to execute vastai subcommands via the Bash tool, including disruptive actions like unlist machine or delete machine.
Sanitization: Absent. The skill does not instruct the agent to sanitize or filter the content of renter-submitted reports before processing.

vastai-host