skills/instavm/skills/use-instavm/Gen Agent Trust Hub

use-instavm

Pass

Audited by Gen Agent Trust Hub on Mar 11, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATIONREMOTE_CODE_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes the instavm SDK to execute commands on remote ephemeral sessions and persistent virtual machines (e.g., client.execute("python -V", language="bash") in references/compute.md). This is a core feature for interacting with the compute infrastructure.\n- [EXTERNAL_DOWNLOADS]: The skill requires the installation of the instavm Python package from the official registry during setup to provide the necessary SDK for platform interaction (found in references/setup.md).\n- [DATA_EXFILTRATION]: The skill facilitates the management of SSH access by reading the user's public key (e.g., ~/.ssh/id_ed25519.pub in references/access.md) and registering it with the InstaVM platform. It also handles the platform's API keys via environment variables (INSTAVM_API_KEY) for authentication with vendor-owned API endpoints (api.instavm.io in references/platform.md).\n- [REMOTE_CODE_EXECUTION]: The skill supports creating machine snapshots from OCI images and cloning Git repositories into the remote compute environment as part of the VM provisioning process (documented in references/compute.md).
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 11, 2026, 10:52 AM