together-gpu-clusters
Pass
Audited by Gen Agent Trust Hub on Mar 30, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions in
references/tcloud-cli.mdto download the standalonetcloudCLI binary from an Amazon S3 bucket (tcloud-cli-downloads.s3.us-west-2.amazonaws.com). This uses a well-known service for distributing official vendor tooling. - [COMMAND_EXECUTION]: The skill includes numerous shell commands and scripts for cluster operations. This includes the use of
sudofor administrative troubleshooting tasks on cluster nodes, such assudo dmesgfor kernel logs andsudo scontrolfor Slurm management, which is appropriate for the intended use case of infrastructure management. - [CREDENTIALS_UNSAFE]: The documentation describes workflows for managing sensitive information, such as Kubernetes
kubeconfigfiles, admin tokens, and SSH keys. It correctly advises using environment variables (e.g.,TOGETHER_API_KEY) for authentication rather than hardcoding secrets. - [DATA_EXFILTRATION]: Network activity is restricted to communication with the official Together AI API (
api.together.xyz) and downloading configuration/tools from AWS S3. No suspicious data exfiltration patterns were detected.
Audit Metadata