skypilot-multi-cloud-orchestration

Pass

Audited by Gen Agent Trust Hub on Oct 29, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs the user to install the skypilot package and its cloud-specific dependencies from the official Python Package Index (PyPI). It also references official documentation and GitHub repositories for SkyPilot, which are well-known and reputable sources for this tool.
  • [COMMAND_EXECUTION]: The skill outlines the use of the sky CLI for cluster management, job execution, and model serving. These operations are the core functionality of the SkyPilot tool and are presented in a typical, documented manner.
  • [CREDENTIALS_UNSAFE]: The skill demonstrates best practices for handling sensitive credentials by using environment variable inheritance (e.g., HF_TOKEN: $HF_TOKEN) and explicit secrets management features, rather than hardcoding actual keys. This ensures that sensitive tokens remain in the user's secure environment.
  • [INDIRECT_PROMPT_INJECTION]: As an infrastructure orchestration tool, SkyPilot naturally processes configuration files (YAML) and setup scripts. The skill describes how to define these resources and provides templates for common ML workflows. While these patterns define execution logic, they are standard for Infrastructure-as-Code (IaC) and do not contain deceptive or malicious instructions intended to subvert the agent's behavior.
  • [DYNAMIC_EXECUTION]: The skill provides examples of running Python scripts and shell commands on remote cloud instances. This dynamic execution is the primary purpose of the orchestration tool and is managed through the tool's standard lifecycle (setup/run phases).
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 29, 2026, 03:22 PM