skypilot-org/skypilot agent hook skill
compute orchestration
SkyPilot is a system for running, managing, and scaling AI workloads across multiple infrastructure providers—including Kubernetes, Slurm, AWS, GCP, Azure, and 20+ other clouds and clusters. It provides a unified control plane and simple YAML-based interface that lets you launch jobs, manage resources, and handle scheduling without vendor lock-in.
Launch AI training and inference jobs on any cloud, Kubernetes cluster, or Slurm system from a single YAML specification Automatically find the cheapest available infrastructure, provision resources, and recover from capacity errors Sync code, manage dependencies, and monitor job progress across multiple clusters and cloud providers Schedule multi-node distributed jobs with gang scheduling, autoscaling, and intelligent workload binpacking Enable your AI agents (Claude, etc.) to provision and manage compute resources via the SkyPilot Skill 43 CRITICAL✓ 65 HIGH✓ 263 MEDIUM 46 LOW
✓ CRITICAL/HIGH reflect AI-verified findings (false positives excluded) · MEDIUM/LOW/INFO are unverified scanner output
AI-verified (CRITICAL/HIGH): 41 confirmed (38%) 67 likely real (62%) 14 false positive — excluded from CRITICAL/HIGH count above
Findings by checker · 15 high-signal, 2 mostly false-positive (hidden by default)
CHK-081 37 findings 29 confirmed 8 likely
0% FP CHK-083 32 findings 28 likely 4 false positive
13% FP CHK-125 24 findings 2 confirmed 17 likely 5 false positive
21% FP CHK-099 6 findings 6 likely
0% FP CHK-090 4 findings 4 confirmed
0% FP CHK-129 3 findings 1 confirmed 1 likely 1 false positive
33% FP CHK-043 2 findings 2 likely
0% FP CHK-065 2 findings 2 confirmed
0% FP CHK-089 1 finding 1 confirmed
0% FP CHK-074 1 finding 1 confirmed
0% FP CHK-042 1 finding 1 likely
0% FP CHK-105 1 finding 1 confirmed
0% FP CHK-047 1 finding 1 likely
0% FP CHK-115 1 finding 1 likely
0% FP CHK-073 1 finding 1 likely
0% FP ▼ Show 2 checkers that are mostly false positives (5 findings) 186 findings click to expand
CHK-081 Command injection risk — exec/execSync with string interpolation in sky/backends/backend_utils.py
sky/backends/backend_utils.py
AI: likely real confirmed ▼
CHK-089 --dangerously-skip-permissions in executable — all permission checks bypassed
llm/verl/search-tooling/verl-search-interaction.yaml
AI: confirmed confirmed ▼
CHK-081 Command injection risk — exec/execSync with string interpolation in sky/provision/gcp/instance_utils.py
sky/provision/gcp/instance_utils.py
AI: likely real confirmed ▼
CHK-081 Command injection risk — exec/execSync with string interpolation in sky/backends/local_docker_backend.py
sky/backends/local_docker_backend.py
AI: confirmed confirmed ▼
CHK-081 Command injection risk — exec/execSync with string interpolation in sky/clouds/gcp.py
sky/clouds/gcp.py
AI: confirmed confirmed ▼
CHK-081 Command injection risk — exec/execSync with string interpolation in sky/skylet/ray_patches/__init__.py
sky/skylet/ray_patches/__init__.py
AI: likely real confirmed ▼
CHK-081 Command injection risk — exec/execSync with string interpolation in sky/catalog/images/aws_utils/image_gen.py
sky/catalog/images/aws_utils/image_gen.py
AI: confirmed confirmed ▼
CHK-081 Command injection risk — exec/execSync with string interpolation in sky/cloud_stores.py
sky/cloud_stores.py
AI: confirmed confirmed ▼
CHK-081 Command injection risk — exec/execSync with string interpolation in examples/temporal/skypilot_workflow.py
examples/temporal/skypilot_workflow.py
AI: confirmed confirmed ▼
CHK-081 Command injection risk — exec/execSync with string interpolation in sky/clouds/kubernetes.py
sky/clouds/kubernetes.py
AI: likely real confirmed ▼
CHK-081 Command injection risk — exec/execSync with string interpolation in tests/load_tests/db_scale_tests/run_postgres_cleanup.py
tests/load_tests/db_scale_tests/run_postgres_cleanup.py
AI: confirmed confirmed ▼
CHK-081 Command injection risk — exec/execSync with string interpolation in tests/conftest.py
tests/conftest.py
AI: likely real confirmed ▼
CHK-074 Permission bypass documented — Claude Code runs without user confirmation
llm/verl/search-tooling/verl-search-interaction.yaml
AI: confirmed confirmed ▼
CHK-081 Command injection risk — exec/execSync with string interpolation in sky/clouds/aws.py
sky/clouds/aws.py
AI: confirmed confirmed ▼
CHK-081 Command injection risk — exec/execSync with string interpolation in sky/clouds/azure.py
sky/clouds/azure.py
AI: confirmed confirmed ▼
CHK-081 Command injection risk — exec/execSync with string interpolation in sky/authentication.py
sky/authentication.py
AI: confirmed confirmed ▼
CHK-081 Command injection risk — exec/execSync with string interpolation in sky/catalog/data_fetchers/fetch_azure.py
sky/catalog/data_fetchers/fetch_azure.py
AI: confirmed confirmed ▼
CHK-081 Command injection risk — exec/execSync with string interpolation in tests/smoke_tests/smoke_tests_utils.py
tests/smoke_tests/smoke_tests_utils.py
AI: likely real confirmed ▼
CHK-081 Command injection risk — exec/execSync with string interpolation in examples/resnet_app.py
examples/resnet_app.py
AI: confirmed confirmed ▼
CHK-081 Command injection risk — exec/execSync with string interpolation in sky/data/data_utils.py
sky/data/data_utils.py
AI: confirmed confirmed ▼
CHK-133 Real secret in example output block — Private key in example output
sky/ssh_node_pools/deploy/deploy.py
AI: likely real likely ▼
CHK-081 Command injection risk — exec/execSync with string interpolation in sky/catalog/images/aws_utils/image_delete.py
sky/catalog/images/aws_utils/image_delete.py
AI: confirmed confirmed ▼
CHK-081 Command injection risk — exec/execSync with string interpolation in examples/tensorboard_app.py
examples/tensorboard_app.py
AI: confirmed confirmed ▼
CHK-081 Command injection risk — exec/execSync with string interpolation in sky/provision/scp/config.py
sky/provision/scp/config.py
AI: confirmed confirmed ▼
CHK-081 Command injection risk — exec/execSync with string interpolation in sky/catalog/data_fetchers/fetch_aws.py
sky/catalog/data_fetchers/fetch_aws.py
AI: confirmed confirmed ▼
CHK-081 Command injection risk — exec/execSync with string interpolation in sky/skylet/attempt_skylet.py
sky/skylet/attempt_skylet.py
AI: confirmed confirmed ▼
CHK-081 Command injection risk — exec/execSync with string interpolation in examples/resnet_app_storage.py
examples/resnet_app_storage.py
AI: confirmed confirmed ▼
CHK-081 Command injection risk — exec/execSync with string interpolation in sky/data/storage_utils.py
sky/data/storage_utils.py
AI: confirmed confirmed ▼
CHK-043 Database Connection URI (Postgres) detected in tests/load_tests/db_scale_tests/inject_production_scale_data.py
tests/load_tests/db_scale_tests/inject_production_scale_data.py
AI: likely real confirmed ▼
CHK-081 Command injection risk — exec/execSync with string interpolation in sky/data/data_transfer.py
sky/data/data_transfer.py
AI: confirmed confirmed ▼
CHK-081 Command injection risk — exec/execSync with string interpolation in sky/clouds/cudo.py
sky/clouds/cudo.py
AI: confirmed confirmed ▼
CHK-081 Command injection risk — exec/execSync with string interpolation in .buildkite/generate_pipeline.py
.buildkite/generate_pipeline.py
AI: confirmed confirmed ▼
CHK-043 Database Connection URI (Postgres) detected in tests/load_tests/db_scale_tests/create_aws_postgres_db.sh
tests/load_tests/db_scale_tests/create_aws_postgres_db.sh
AI: likely real confirmed ▼
CHK-081 Command injection risk — exec/execSync with string interpolation in tests/smoke_tests/docker/docker_utils.py
tests/smoke_tests/docker/docker_utils.py
AI: likely real confirmed ▼
CHK-081 Command injection risk — exec/execSync with string interpolation in tests/load_tests/benchmark_ctl.py
tests/load_tests/benchmark_ctl.py
AI: confirmed confirmed ▼
CHK-042 SSH Private Key detected in sky/ssh_node_pools/deploy/deploy.py
sky/ssh_node_pools/deploy/deploy.py
AI: likely real confirmed ▼
CHK-081 Command injection risk — exec/execSync with string interpolation in sky/skylet/events.py
sky/skylet/events.py
AI: likely real confirmed ▼
CHK-081 Command injection risk — exec/execSync with string interpolation in examples/admin_policy/example_policy/example_policy/skypilot_policy.py
examples/admin_policy/example_policy/example_policy/skypilot_policy.py
AI: confirmed confirmed ▼
CHK-081 Command injection risk — exec/execSync with string interpolation in sky/provision/gcp/mig_utils.py
sky/provision/gcp/mig_utils.py
AI: confirmed confirmed ▼
CHK-081 Command injection risk — exec/execSync with string interpolation in sky/data/storage.py
sky/data/storage.py
AI: confirmed confirmed ▼
CHK-081 Command injection risk — exec/execSync with string interpolation in sky/backends/task_codegen.py
sky/backends/task_codegen.py
AI: confirmed confirmed ▼
CHK-081 Command injection risk — exec/execSync with string interpolation in sky/provision/kubernetes/utils.py
sky/provision/kubernetes/utils.py
AI: confirmed confirmed ▼
CHK-081 Command injection risk — exec/execSync with string interpolation in tests/load_tests/db_scale_tests/run_postgres_injection.py
tests/load_tests/db_scale_tests/run_postgres_injection.py
AI: confirmed confirmed ▼
CHK-083 Potential path traversal — user-controlled path in file operation: sky/catalog/data_fetchers/fetch_hyperbolic.py
sky/catalog/data_fetchers/fetch_hyperbolic.py
AI: likely real possible ▼
CHK-083 Potential path traversal — user-controlled path in file operation: sky/server/metrics.py
sky/server/metrics.py
AI: likely real possible ▼
CHK-083 Potential path traversal — user-controlled path in file operation: sky/provision/vsphere/common/cls_api_helper.py
sky/provision/vsphere/common/cls_api_helper.py
AI: likely real possible ▼
CHK-083 Potential path traversal — user-controlled path in file operation: llm/train-eval-jobgroup/code/trainer.py
llm/train-eval-jobgroup/code/trainer.py
AI: likely real possible ▼
CHK-090 HTTP transport bound to 0.0.0.0 — exposed to all network interfaces
llm/distributed-rl-eval/src/game_server.py
AI: confirmed likely ▼
CHK-105 Secret echoed to CI logs in .github/workflows/publish-helm.yml
.github/workflows/publish-helm.yml
AI: confirmed likely ▼
CHK-090 HTTP transport bound to 0.0.0.0 — exposed to all network interfaces
llm/distributed-rl-eval/src/eval_head.py
AI: confirmed likely ▼
CHK-099 Potential IDOR — 'user_id' accessed without ownership check
sky/server/requests/payloads.py
AI: likely real possible ▼
CHK-125 subprocess module — arbitrary shell execution — no scope constraint in client/sdk.py
sky/client/sdk.py
AI: likely real likely ▼
CHK-099 Potential IDOR — 'user_id' accessed without ownership check
sky/users/server.py
AI: likely real possible ▼
CHK-125 subprocess module — arbitrary shell execution — no scope constraint in utils/context.py
sky/utils/context.py
AI: likely real likely ▼
CHK-083 Potential path traversal — user-controlled path in file operation: llm/gpt-oss-finetuning/sft/train.py
llm/gpt-oss-finetuning/sft/train.py
AI: likely real possible ▼
CHK-125 subprocess module — arbitrary shell execution — no scope constraint in server/impl.py
sky/serve/server/impl.py
AI: likely real likely ▼
CHK-083 Potential path traversal — user-controlled path in file operation: sky/skylet/executor/slurm.py
sky/skylet/executor/slurm.py
AI: likely real possible ▼
CHK-083 Potential path traversal — user-controlled path in file operation: examples/torch_ddp_benchmark/torch_ddp_benchmark.py
examples/torch_ddp_benchmark/torch_ddp_benchmark.py
AI: likely real possible ▼
CHK-083 Potential path traversal — user-controlled path in file operation: sky/server/requests/requests.py
sky/server/requests/requests.py
AI: likely real likely ▼
CHK-083 Potential path traversal — user-controlled path in file operation: .buildkite/generate_pipeline.py
.buildkite/generate_pipeline.py
AI: likely real likely ▼
CHK-099 Potential IDOR — 'task_id' accessed without ownership check
sky/skylet/services.py
AI: likely real possible ▼
CHK-065 git clone without commit pin in install script: examples/resnet_distributed_torch_scripts/setup.sh
examples/resnet_distributed_torch_scripts/setup.sh
AI: confirmed possible ▼
CHK-065 git clone without commit pin in install script: examples/autoresearch/setup.sh
examples/autoresearch/setup.sh
AI: confirmed possible ▼
CHK-125 kubectl invocation — cluster command execution — no scope constraint in kubernetes/gpu_labeler.py
sky/utils/kubernetes/gpu_labeler.py
AI: likely real likely ▼
CHK-125 subprocess module — arbitrary shell execution — no scope constraint in data_fetchers/fetch_aws.py
sky/catalog/data_fetchers/fetch_aws.py
AI: likely real likely ▼
CHK-125 kubectl invocation — cluster command execution — no scope constraint in kubernetes/kubernetes_deploy_utils.py
sky/utils/kubernetes/kubernetes_deploy_utils.py
AI: likely real likely ▼
CHK-125 kubectl invocation — cluster command execution — no scope constraint in db_scale_tests/run_postgres_injection.py
tests/load_tests/db_scale_tests/run_postgres_injection.py
AI: confirmed likely ▼
CHK-125 subprocess module — arbitrary shell execution — no scope constraint in serve/runner.py
sky/serve/runner.py
AI: likely real likely ▼
CHK-099 Potential IDOR — 'task_id' accessed without ownership check
sky/jobs/server/utils.py
AI: likely real possible ▼
CHK-125 subprocess module — arbitrary shell execution — no scope constraint in serve/service.py
sky/serve/service.py
AI: likely real likely ▼
CHK-125 kubectl invocation — cluster command execution — no scope constraint in db_scale_tests/run_postgres_cleanup.py
tests/load_tests/db_scale_tests/run_postgres_cleanup.py
AI: confirmed likely ▼
CHK-125 kubectl invocation — cluster command execution — no scope constraint in deploy/deploy.py
sky/ssh_node_pools/deploy/deploy.py
AI: likely real likely ▼
CHK-083 Potential path traversal — user-controlled path in file operation: llm/verl/code/preprocess_rstar_coder.py
llm/verl/code/preprocess_rstar_coder.py
AI: likely real possible ▼
CHK-083 Potential path traversal — user-controlled path in file operation: sky/skylet/runtime_utils.py
sky/skylet/runtime_utils.py
AI: likely real possible ▼
CHK-047 Potential SSRF — user-controlled URL passed to HTTP client in tests/test_api_compatibility.py
tests/test_api_compatibility.py
AI: likely real likely ▼
CHK-099 Potential IDOR — 'task_id' accessed without ownership check
sky/jobs/server/core.py
AI: likely real possible ▼
CHK-125 kubectl invocation — cluster command execution — no scope constraint in templates/kubernetes-port-forward-proxy-command.sh
sky/templates/kubernetes-port-forward-proxy-command.sh
AI: likely real possible ▼
CHK-129 Sensitive field in return type/schema — password: str
sky/provision/docker_utils.py
AI: likely real likely ▼
CHK-125 kubectl invocation — cluster command execution — no scope constraint in kubernetes/volume.py
sky/provision/kubernetes/volume.py
AI: likely real likely ▼
CHK-125 kubectl invocation — cluster command execution — no scope constraint in kubernetes/generate_kubeconfig.sh
sky/utils/kubernetes/generate_kubeconfig.sh
AI: likely real likely ▼
CHK-125 kubectl invocation — cluster command execution — no scope constraint in scripts/helm_deploy_and_verify.sh
tests/kubernetes/scripts/helm_deploy_and_verify.sh
AI: likely real likely ▼
CHK-115 Skill instructs agent to access credential file: ~/.kube/config
agent/skills/skypilot/references/troubleshooting.md
AI: likely real likely ▼
CHK-073 Curl Pipe Bash Install detected in Dockerfile
Dockerfile
AI: likely real likely ▼
CHK-090 HTTP transport bound to 0.0.0.0 — exposed to all network interfaces
sky/serve/load_balancer.py
AI: confirmed likely ▼
CHK-083 Potential path traversal — user-controlled path in file operation: llm/train-eval-jobgroup/code/evaluator.py
llm/train-eval-jobgroup/code/evaluator.py
AI: likely real possible ▼
CHK-083 Potential path traversal — user-controlled path in file operation: examples/batch/custom_formats/process_range.py
examples/batch/custom_formats/process_range.py
AI: likely real possible ▼
CHK-125 kubectl invocation — cluster command execution — no scope constraint in kubernetes/instance.py
sky/provision/kubernetes/instance.py
AI: likely real likely ▼
CHK-083 Potential path traversal — user-controlled path in file operation: sky/catalog/data_fetchers/fetch_runpod.py
sky/catalog/data_fetchers/fetch_runpod.py
AI: likely real possible ▼
CHK-125 kubectl invocation — cluster command execution — no scope constraint in server/server.py
sky/server/server.py
AI: likely real likely ▼
CHK-099 Potential IDOR — 'user_id' accessed without ownership check
sky/server/requests/requests.py
AI: likely real likely ▼
CHK-083 Potential path traversal — user-controlled path in file operation: tests/load_tests/generators/shell_generator.py
tests/load_tests/generators/shell_generator.py
AI: likely real possible ▼
CHK-083 Potential path traversal — user-controlled path in file operation: llm/rag/scripts/serve_rag.py
llm/rag/scripts/serve_rag.py
AI: likely real possible ▼
CHK-083 Potential path traversal — user-controlled path in file operation: sky/provision/do/utils.py
sky/provision/do/utils.py
AI: likely real possible ▼
CHK-083 Potential path traversal — user-controlled path in file operation: examples/docker/echo_app/echo.py
examples/docker/echo_app/echo.py
AI: likely real possible ▼
CHK-083 Potential path traversal — user-controlled path in file operation: sky/catalog/images/aws_utils/image_gen.py
sky/catalog/images/aws_utils/image_gen.py
AI: likely real likely ▼
CHK-083 Potential path traversal — user-controlled path in file operation: sky/server/common.py
sky/server/common.py
AI: likely real possible ▼
CHK-125 subprocess module — arbitrary shell execution — no scope constraint in skylet/events.py
sky/skylet/events.py
AI: likely real likely ▼
CHK-083 Potential path traversal — user-controlled path in file operation: examples/batch/diffusion/generate_images.py
examples/batch/diffusion/generate_images.py
AI: likely real possible ▼
CHK-083 Potential path traversal — user-controlled path in file operation: sky/skylet/services.py
sky/skylet/services.py
AI: likely real possible ▼
CHK-083 Potential path traversal — user-controlled path in file operation: sky/server/server.py
sky/server/server.py
AI: likely real likely ▼
▼ Show 14 false positives (7% of this view) Last scanned: Jul 18, 2026
More servers
nanocoai/nanoclaw 85
A lightweight alternative to OpenClaw that runs in containers for security. Connects to WhatsApp, Telegram, Slack, Discord, Gmail and other messaging apps,, has memory, scheduled jobs, and runs directly on Anthropic's Agents SDK
30k★
obra/superpowers 85
Foundational skill pack by Jesse Vincent now in anthropics/claude-plugins-official. Includes ffuf web-fuzzing/pentest skill. Partial analysis done — full hook and plugin inspection pending. tier=T2
191k★
google-gemini/gemini-cli 85
An open-source AI agent that brings the power of Gemini directly into your terminal.
106k★
google-gemini/gemini-cli 85
An open-source AI agent that brings the power of Gemini directly into your terminal.
106k★
nanocoai/nanoclaw 85
A lightweight alternative to OpenClaw that runs in containers for security. Connects to WhatsApp, Telegram, Slack, Discord, Gmail and other messaging apps,, has memory, scheduled jobs, and runs directly on Anthropic's Agents SDK
30k★
Significant-Gravitas/AutoGPT 85
AutoGPT is the vision of accessible AI for everyone, to use and to build on. Our mission is to provide the tools, so that you can focus on what matters.
186k★
Scan your entire org's MCP deployment
2,500+ repos pre-scored. 22% carry CRITICAL findings.