{"data":{"slug":"vastai-vast-ai","verdict":"passed","scannedAt":"2026-10-26T10:54:32.712Z","scannerVersion":"1.2.1","latest":{"id":"260482b4-e5ca-46c0-a861-208c501fd7e3","createdAt":"2026-10-25T23:23:54.915Z","version":"d57a6f1","trigger":"new","scannerVersion":"1.2.1","verdict":"passed","checks":[{"id":"hidden_instructions","status":"passed","findings":0,"label":"Hidden instructions"},{"id":"hidden_text","status":"passed","findings":0,"label":"Invisible text"},{"id":"sensitive_access","status":"passed","findings":2,"label":"Access to credentials"},{"id":"remote_code","status":"passed","findings":1,"label":"Downloads and runs code"},{"id":"exfiltration","status":"passed","findings":0,"label":"Sends data out"},{"id":"secrets","status":"passed","findings":0,"label":"Leaked secrets"}],"findings":[{"rule":"SA-001","check":"sensitive_access","title":"Refers to SSH keys or cloud credentials","detail":"Mentions files that hold private keys or cloud tokens.","evidence":"… # Verify auth + check balance vastai create ssh-key ~/.ssh/id_ed25519.pub # Register SSH key (do BEFORE create) vastai search offer…","location":"SKILL.md, line 22","severity":"low"},{"rule":"SA-001","check":"sensitive_access","title":"Refers to SSH keys or cloud credentials","detail":"Mentions files that hold private keys or cloud tokens.","evidence":"… # List account SSH keys vastai create ssh-key ~/.ssh/id_ed25519.pub # Add SSH key from file (do BEFORE create instance) …","location":"SKILL.md, line 176","severity":"low"},{"rule":"RC-001","check":"remote_code","title":"Pipes a download into a shell","detail":"Runs whatever a URL returns, with no chance to read it first.","evidence":"… ## Install ```bash # Linux/macOS (recommended, no Python required) curl -fsSL https://vast.ai/install.sh | bash # or via PyPI (Windows, or if you'd rather use pip) pip install vast…","location":"SKILL.md, line 11","severity":"low"}],"toolCount":null},"history":[{"id":"260482b4-e5ca-46c0-a861-208c501fd7e3","createdAt":"2026-10-25T23:23:54.915Z","version":"d57a6f1","trigger":"new","scannerVersion":"1.2.1","verdict":"passed","checks":[{"id":"hidden_instructions","status":"passed","findings":0,"label":"Hidden instructions"},{"id":"hidden_text","status":"passed","findings":0,"label":"Invisible text"},{"id":"sensitive_access","status":"passed","findings":2,"label":"Access to credentials"},{"id":"remote_code","status":"passed","findings":1,"label":"Downloads and runs code"},{"id":"exfiltration","status":"passed","findings":0,"label":"Sends data out"},{"id":"secrets","status":"passed","findings":0,"label":"Leaked secrets"}],"findings":[{"rule":"SA-001","check":"sensitive_access","title":"Refers to SSH keys or cloud credentials","detail":"Mentions files that hold private keys or cloud tokens.","evidence":"… # Verify auth + check balance vastai create ssh-key ~/.ssh/id_ed25519.pub # Register SSH key (do BEFORE create) vastai search offer…","location":"SKILL.md, line 22","severity":"low"},{"rule":"SA-001","check":"sensitive_access","title":"Refers to SSH keys or cloud credentials","detail":"Mentions files that hold private keys or cloud tokens.","evidence":"… # List account SSH keys vastai create ssh-key ~/.ssh/id_ed25519.pub # Add SSH key from file (do BEFORE create instance) …","location":"SKILL.md, line 176","severity":"low"},{"rule":"RC-001","check":"remote_code","title":"Pipes a download into a shell","detail":"Runs whatever a URL returns, with no chance to read it first.","evidence":"… ## Install ```bash # Linux/macOS (recommended, no Python required) curl -fsSL https://vast.ai/install.sh | bash # or via PyPI (Windows, or if you'd rather use pip) pip install vast…","location":"SKILL.md, line 11","severity":"low"}],"toolCount":null}],"endpoint":null,"tools":[],"toolsHash":null,"toolsPinnedAt":null,"toolsLastSeenAt":null,"toolChanges":[]}}