runpodctl
Pass
Audited by Gen Agent Trust Hub on Mar 25, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to use the 'runpodctl' command-line interface via a Bash tool. This includes commands for managing GPU pods, serverless endpoints, and storage volumes within the Runpod infrastructure.
- [EXTERNAL_DOWNLOADS]: Fetches the CLI tool and updates from official vendor sources, specifically 'cli.runpod.net' and the 'runpod/runpodctl' GitHub repository. While the installer uses a piped-to-bash pattern, the source is verified as the official vendor domain.
- [REMOTE_CODE_EXECUTION]: Provides an installation command (
curl -sSL https://cli.runpod.net | bash) that executes a remote script. This is the documented official installer for the Runpod CLI and is considered safe within the vendor context. - [DATA_EXFILTRATION]: Mentions API key management and SSH key configuration via
runpodctl doctor. All network operations target official vendor domains (runpod.net, runpod.io, runpod.ai) required for the tool's core functionality.
Audit Metadata