vast-gpu

SUSPICIOUS. The skill is largely purpose-aligned and uses the official Vast.ai CLI/docs, so it does not look malicious. Risk is still meaningful because it grants broad shell access, performs billable cloud actions, transfers code/data to third-party hosts, and explicitly disables SSH host verification.