together-dedicated-containers

Pass

Audited by Gen Agent Trust Hub on Mar 30, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs users to install the together SDK and the sprocket worker framework. While sprocket is fetched from a custom index (https://pypi.together.ai/), this is the official repository for Together AI, a well-known technology provider.
  • [COMMAND_EXECUTION]: The jig CLI documentation includes commands for building and deploying Docker containers (jig build, jig deploy). This is the primary intended functionality of the skill for managing dedicated container runtimes.
  • [DATA_EXFILTRATION]: Communication is restricted to official Together AI endpoints (api.together.ai, registry.together.xyz) for API operations and image storage. Standard placeholders for TOGETHER_API_KEY are used in documentation and scripts.
  • [PROMPT_INJECTION]: Instructions in SKILL.md are focused on steering the agent toward the correct Together AI service based on user needs (containers vs. serverless endpoints) and do not attempt to bypass safety filters or override system constraints.
  • [REMOTE_CODE_EXECUTION]: Documentation for pyproject.toml illustrates how to include build-time commands (e.g., pip install torch) and runtime startup commands (cmd = "python app.py --queue"). These are standard configuration patterns for containerized applications.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 30, 2026, 06:15 PM