autodl-train

This skill appears coherent and implements what it claims: it needs SSH access to the remote AutoDL server and will run commands inside the configured project_path. Before installing or running: 1) Treat SSH credentials as powerful—only grant access to hosts you trust. Prefer SSH keys over putting passwords in environment variables. 2) Verify the truncated helper functions (run_remote_script, build_ssh_command, build_activation_block) to ensure they do not write secrets to disk or leak credentials and that password handling (if used) is secure. 3) Confirm allowed_project_roots in your config so the skill cannot be pointed to an overly broad path (e.g., '/'). 4) Test first against a non-production project/host to observe behavior. 5) If you need higher assurance, request the remaining parts of common.py (the SSH/remote-run implementation) so they can be inspected for any unsafe temporary-file or subprocess patterns. Overall risk is typical for any tool that executes commands on a remote server via SSH.