use-instavm
Pass
Audited by Gen Agent Trust Hub on Mar 11, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATIONREMOTE_CODE_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
instavmSDK to execute commands on remote ephemeral sessions and persistent virtual machines (e.g.,client.execute("python -V", language="bash")inreferences/compute.md). This is a core feature for interacting with the compute infrastructure.\n- [EXTERNAL_DOWNLOADS]: The skill requires the installation of theinstavmPython package from the official registry during setup to provide the necessary SDK for platform interaction (found inreferences/setup.md).\n- [DATA_EXFILTRATION]: The skill facilitates the management of SSH access by reading the user's public key (e.g.,~/.ssh/id_ed25519.pubinreferences/access.md) and registering it with the InstaVM platform. It also handles the platform's API keys via environment variables (INSTAVM_API_KEY) for authentication with vendor-owned API endpoints (api.instavm.ioinreferences/platform.md).\n- [REMOTE_CODE_EXECUTION]: The skill supports creating machine snapshots from OCI images and cloning Git repositories into the remote compute environment as part of the VM provisioning process (documented inreferences/compute.md).
Audit Metadata