[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skill:01M796WV3TACB2AXVG2WDT8329":3,"skill-same:01M796WV3TACB2AXVG2WDT8329":57},{"skillNo":4,"name":5,"nameZh":6,"description":7,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":16,"categories":17,"keywords":18,"publishedAt":19,"linkOnly":20,"markdownContent":21,"markdownBody":22,"frontMatter":23,"refName":34,"commitSha":35,"skillDirectory":36,"forksCount":37,"repositoryHtmlUrl":38,"repositoryHomepageUrl":6,"ownerHtmlUrl":39,"ownerBlogUrl":40,"ownerDescription":41,"updatedAt":42,"install":43,"resources":56},"01M796WV3TACB2AXVG2WDT8329","vastai-security-basics",null,"Apply Vast.ai security best practices for API keys and instance access.\nUse when securing API keys, hardening SSH access to GPU instances,\nor auditing Vast.ai security configuration.\nTrigger with phrases like \"vastai security\", \"vastai secrets\",\n\"secure vastai\", \"vastai API key security\", \"vastai ssh security\".","jukeyman\u002Fjukeyman-skills","jukeyman","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F142960420?v=4","01M78FR4Y3DHMMCBCC0GXXNB3F","RICK JEFFERSON","01M78FR4Z8RVQRAD31Y5J7V6EB",1,"MIT","https:\u002F\u002Fgithub.com\u002Fjukeyman\u002Fjukeyman-skills\u002Fblob\u002Fmain\u002Fskills\u002Fsaas-packs--vastai-pack--vastai-security-basics\u002FSKILL.md",[],[],"2026-11-15 14:19:17",false,"---\nname: vastai-security-basics\ndescription: |\n  Apply Vast.ai security best practices for API keys and instance access.\n  Use when securing API keys, hardening SSH access to GPU instances,\n  or auditing Vast.ai security configuration.\n  Trigger with phrases like \"vastai security\", \"vastai secrets\",\n  \"secure vastai\", \"vastai API key security\", \"vastai ssh security\".\nallowed-tools: Read, Write, Grep\nversion: 1.0.0\nlicense: MIT\nauthor: Jeremy Longshore \u003Cjeremy@intentsolutions.io>\ncompatible-with: claude-code, codex, openclaw\ntags: [saas, vast-ai, api, security]\n---\n# Vast.ai Security Basics\n\n## Overview\nSecurity best practices for Vast.ai API keys, SSH access to GPU instances, data protection on rented hardware, and credential management. Vast.ai instances run as root on shared hardware, requiring careful attention to data lifecycle.\n\n## Prerequisites\n- Vast.ai account with API key\n- Understanding of SSH key management\n- Secrets manager available (optional but recommended)\n\n## Instructions\n\n### Step 1: API Key Management\n\n```bash\n# Never commit API keys to git\necho '.vast_api_key' >> .gitignore\necho '.env' >> .gitignore\n\n# Use environment variables, not files in repos\nexport VASTAI_API_KEY=\"$(vault kv get -field=api_key secret\u002Fvastai)\"\n\n# Rotate keys periodically at cloud.vast.ai > Account > API Keys\n```\n\n```python\n# Fail fast on missing credentials\nimport os\n\ndef get_api_key():\n    key = os.environ.get(\"VASTAI_API_KEY\")\n    if not key:\n        key_file = os.path.expanduser(\"~\u002F.vast_api_key\")\n        if os.path.exists(key_file):\n            key = open(key_file).read().strip()\n    if not key:\n        raise ValueError(\"VASTAI_API_KEY not set and ~\u002F.vast_api_key not found\")\n    return key\n```\n\n### Step 2: SSH Key Security\n\n```bash\n# Generate a dedicated key pair for Vast.ai instances\nssh-keygen -t ed25519 -f ~\u002F.ssh\u002Fvastai_key -C \"vastai-instances\" -N \"\"\n\n# Upload public key at cloud.vast.ai > Account > SSH Keys\n\n# Use the dedicated key for connections\nssh -i ~\u002F.ssh\u002Fvastai_key -p PORT root@HOST\n```\n\n### Step 3: Data Protection on Shared Hardware\n\n```python\ndef secure_cleanup(instance_id, ssh_host, ssh_port):\n    \"\"\"Securely wipe data before destroying an instance.\"\"\"\n    import subprocess\n    # Overwrite sensitive files before instance destruction\n    subprocess.run([\n        \"ssh\", \"-p\", str(ssh_port), \"-o\", \"StrictHostKeyChecking=no\",\n        f\"root@{ssh_host}\",\n        \"rm -rf \u002Fworkspace\u002Fdata \u002Fworkspace\u002Fcheckpoints \u002Froot\u002F.ssh\u002Fauthorized_keys; \"\n        \"history -c\"\n    ], check=True)\n    # Then destroy\n    subprocess.run([\"vastai\", \"destroy\", \"instance\", str(instance_id)], check=True)\n```\n\n### Step 4: Network Security\n\n- Use SSH tunnels for any services exposed on instances\n- Never expose ports with sensitive data to the public internet\n- Transfer data over SCP\u002FSFTP, not unencrypted HTTP\n- Encrypt training data before upload; decrypt on-instance\n\n### Step 5: Credential Rotation Checklist\n\n- [ ] API key rotated every 90 days\n- [ ] SSH keys dedicated to Vast.ai (not shared with production)\n- [ ] Old SSH keys removed from cloud.vast.ai after rotation\n- [ ] `.vast_api_key` file permissions set to `600`\n- [ ] No API keys in shell history (`export` from a sourced file, not typed)\n\n## Output\n- API key loaded from environment or secrets manager\n- Dedicated SSH key pair for Vast.ai instances\n- Secure cleanup before instance destruction\n- Network security guidelines\n- Credential rotation checklist\n\n## Error Handling\n| Error | Cause | Solution |\n|-------|-------|----------|\n| API key leaked in git | Committed `.env` or key file | Rotate key immediately; add to `.gitignore` |\n| SSH key rejected | Wrong key or not uploaded | Verify key is at cloud.vast.ai > SSH Keys |\n| Data left on destroyed instance | Forgot to clean up | Use `secure_cleanup()` before destroy |\n| Key file world-readable | Wrong permissions | `chmod 600 ~\u002F.vast_api_key ~\u002F.ssh\u002Fvastai_key` |\n\n## Resources\n- [Vast.ai CLI Security](https:\u002F\u002Fdocs.vast.ai\u002Fcli\u002Fget-started)\n- [SSH Key Management](https:\u002F\u002Fdocs.vast.ai\u002Fapi-reference\u002Fintroduction)\n\n## Next Steps\nFor production deployment checklist, see `vastai-prod-checklist`.\n\n## Examples\n\n**Vault integration**: Load API key from HashiCorp Vault at runtime, never write to disk, and use SSH agent forwarding for key management.\n\n**Ephemeral instances**: Treat every Vast.ai instance as throwaway. Never store persistent state on instances; always upload data, process, download results, and destroy.\n","# Vast.ai Security Basics\n\n## Overview\nSecurity best practices for Vast.ai API keys, SSH access to GPU instances, data protection on rented hardware, and credential management. Vast.ai instances run as root on shared hardware, requiring careful attention to data lifecycle.\n\n## Prerequisites\n- Vast.ai account with API key\n- Understanding of SSH key management\n- Secrets manager available (optional but recommended)\n\n## Instructions\n\n### Step 1: API Key Management\n\n```bash\n# Never commit API keys to git\necho '.vast_api_key' >> .gitignore\necho '.env' >> .gitignore\n\n# Use environment variables, not files in repos\nexport VASTAI_API_KEY=\"$(vault kv get -field=api_key secret\u002Fvastai)\"\n\n# Rotate keys periodically at cloud.vast.ai > Account > API Keys\n```\n\n```python\n# Fail fast on missing credentials\nimport os\n\ndef get_api_key():\n    key = os.environ.get(\"VASTAI_API_KEY\")\n    if not key:\n        key_file = os.path.expanduser(\"~\u002F.vast_api_key\")\n        if os.path.exists(key_file):\n            key = open(key_file).read().strip()\n    if not key:\n        raise ValueError(\"VASTAI_API_KEY not set and ~\u002F.vast_api_key not found\")\n    return key\n```\n\n### Step 2: SSH Key Security\n\n```bash\n# Generate a dedicated key pair for Vast.ai instances\nssh-keygen -t ed25519 -f ~\u002F.ssh\u002Fvastai_key -C \"vastai-instances\" -N \"\"\n\n# Upload public key at cloud.vast.ai > Account > SSH Keys\n\n# Use the dedicated key for connections\nssh -i ~\u002F.ssh\u002Fvastai_key -p PORT root@HOST\n```\n\n### Step 3: Data Protection on Shared Hardware\n\n```python\ndef secure_cleanup(instance_id, ssh_host, ssh_port):\n    \"\"\"Securely wipe data before destroying an instance.\"\"\"\n    import subprocess\n    # Overwrite sensitive files before instance destruction\n    subprocess.run([\n        \"ssh\", \"-p\", str(ssh_port), \"-o\", \"StrictHostKeyChecking=no\",\n        f\"root@{ssh_host}\",\n        \"rm -rf \u002Fworkspace\u002Fdata \u002Fworkspace\u002Fcheckpoints \u002Froot\u002F.ssh\u002Fauthorized_keys; \"\n        \"history -c\"\n    ], check=True)\n    # Then destroy\n    subprocess.run([\"vastai\", \"destroy\", \"instance\", str(instance_id)], check=True)\n```\n\n### Step 4: Network Security\n\n- Use SSH tunnels for any services exposed on instances\n- Never expose ports with sensitive data to the public internet\n- Transfer data over SCP\u002FSFTP, not unencrypted HTTP\n- Encrypt training data before upload; decrypt on-instance\n\n### Step 5: Credential Rotation Checklist\n\n- [ ] API key rotated every 90 days\n- [ ] SSH keys dedicated to Vast.ai (not shared with production)\n- [ ] Old SSH keys removed from cloud.vast.ai after rotation\n- [ ] `.vast_api_key` file permissions set to `600`\n- [ ] No API keys in shell history (`export` from a sourced file, not typed)\n\n## Output\n- API key loaded from environment or secrets manager\n- Dedicated SSH key pair for Vast.ai instances\n- Secure cleanup before instance destruction\n- Network security guidelines\n- Credential rotation checklist\n\n## Error Handling\n| Error | Cause | Solution |\n|-------|-------|----------|\n| API key leaked in git | Committed `.env` or key file | Rotate key immediately; add to `.gitignore` |\n| SSH key rejected | Wrong key or not uploaded | Verify key is at cloud.vast.ai > SSH Keys |\n| Data left on destroyed instance | Forgot to clean up | Use `secure_cleanup()` before destroy |\n| Key file world-readable | Wrong permissions | `chmod 600 ~\u002F.vast_api_key ~\u002F.ssh\u002Fvastai_key` |\n\n## Resources\n- [Vast.ai CLI Security](https:\u002F\u002Fdocs.vast.ai\u002Fcli\u002Fget-started)\n- [SSH Key Management](https:\u002F\u002Fdocs.vast.ai\u002Fapi-reference\u002Fintroduction)\n\n## Next Steps\nFor production deployment checklist, see `vastai-prod-checklist`.\n\n## Examples\n\n**Vault integration**: Load API key from HashiCorp Vault at runtime, never write to disk, and use SSH agent forwarding for key management.\n\n**Ephemeral instances**: Treat every Vast.ai instance as throwaway. Never store persistent state on instances; always upload data, process, download results, and destroy.\n",{"name":5,"tags":24,"author":29,"license":15,"version":30,"description":31,"allowed-tools":32,"compatible-with":33},[25,26,27,28],"saas","vast-ai","api","security","Jeremy Longshore \u003Cjeremy@intentsolutions.io>","1.0.0","Apply Vast.ai security best practices for API keys and instance access.\nUse when securing API keys, hardening SSH access to GPU instances,\nor auditing Vast.ai security configuration.\nTrigger with phrases like \"vastai security\", \"vastai secrets\",\n\"secure vastai\", \"vastai API key security\", \"vastai ssh security\".\n","Read, Write, Grep","claude-code, codex, openclaw","main","99825ad3f3bcc6597ddcc7294a14e6e922f2b67b","skills\u002Fsaas-packs--vastai-pack--vastai-security-basics",0,"https:\u002F\u002Fgithub.com\u002Fjukeyman\u002Fjukeyman-skills","https:\u002F\u002Fgithub.com\u002Fjukeyman","https:\u002F\u002FRJBUSINESSSOLUTIONS.ORG","Credit and Finance Expert | Developer\r\n\r\nI'm Rick Jefferson, a seasoned credit and finance expert with over a decade of experience in financial literacy,","2026-07-13 07:03:29",{"source":8,"skillName":5,"commands":44,"prompt":54,"zipAvailable":55},[45,48,51],{"tool":46,"command":47},"npx","npx skills add jukeyman\u002Fjukeyman-skills --skill vastai-security-basics",{"tool":49,"command":50},"bunx","bunx skills add jukeyman\u002Fjukeyman-skills --skill vastai-security-basics",{"tool":52,"command":53},"pnpm","pnpm dlx skills add jukeyman\u002Fjukeyman-skills --skill vastai-security-basics","安装技能，技能地址：https:\u002F\u002Fgithub.com\u002Fjukeyman\u002Fjukeyman-skills\u002Fblob\u002Fmain\u002Fskills\u002Fsaas-packs--vastai-pack--vastai-security-basics\u002FSKILL.md",true,[],[58,65,72,79,86,94],{"skillNo":59,"name":60,"nameZh":6,"description":61,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":62,"categories":63,"keywords":64,"publishedAt":19},"01M79ANS2SM329NEP5ZCX106RR","zustand-store-creator","Create zustand store creator operations. Auto-activating skill for Frontend Development.\nTriggers on: zustand store creator, zustand store creator\nPart of the Frontend Development skill category. Use when working with zustand store creator functionality. Trigger with phrases like \"zustand store creator\", \"zustand creator\", \"zustand\".","https:\u002F\u002Fgithub.com\u002Fjukeyman\u002Fjukeyman-skills\u002Fblob\u002Fmain\u002Fskills\u002Fzustand-store-creator\u002FSKILL.md",[],[],{"skillNo":66,"name":67,"nameZh":6,"description":68,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":69,"categories":70,"keywords":71,"publishedAt":19},"01M79AMZKP4YDEZ7EHG1Y7PP74","zero-trust-config-helper","Configure with zero trust config helper operations. Auto-activating skill for Security Advanced.\nTriggers on: zero trust config helper, zero trust config helper\nPart of the Security Advanced skill category. Use when configuring systems or services. Trigger with phrases like \"zero trust config helper\", \"zero helper\", \"zero\".","https:\u002F\u002Fgithub.com\u002Fjukeyman\u002Fjukeyman-skills\u002Fblob\u002Fmain\u002Fskills\u002Fzero-trust-config-helper\u002FSKILL.md",[],[],{"skillNo":73,"name":74,"nameZh":6,"description":75,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":76,"categories":77,"keywords":78,"publishedAt":19},"01M79AMJSBCEJQNBTYNAHYN5HM","zapier-integration-helper","Assist with zapier integration helper operations. Auto-activating skill for Business Automation.\nTriggers on: zapier integration helper, zapier integration helper\nPart of the Business Automation skill category. Use when working with APIs or building integrations. Trigger with phrases like \"zapier integration helper\", \"zapier helper\", \"zapier\".","https:\u002F\u002Fgithub.com\u002Fjukeyman\u002Fjukeyman-skills\u002Fblob\u002Fmain\u002Fskills\u002Fzapier-integration-helper\u002FSKILL.md",[],[],{"skillNo":80,"name":81,"nameZh":6,"description":82,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":83,"categories":84,"keywords":85,"publishedAt":19},"01M79AHJZGVMARS13VFQYRR1MP","yaml-config-validator","Validate yaml config validator operations. Auto-activating skill for DevOps Basics.\nTriggers on: yaml config validator, yaml config validator\nPart of the DevOps Basics skill category. Use when configuring systems or services. Trigger with phrases like \"yaml config validator\", \"yaml validator\", \"yaml\".","https:\u002F\u002Fgithub.com\u002Fjukeyman\u002Fjukeyman-skills\u002Fblob\u002Fmain\u002Fskills\u002Fyaml-config-validator\u002FSKILL.md",[],[],{"skillNo":87,"name":88,"nameZh":6,"description":89,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":90,"sourceHtmlUrl":91,"categories":92,"keywords":93,"publishedAt":19},"01M79AHGDZRN0020RDQSQDPAM8","xvary-stock-research","Thesis-driven equity analysis from public SEC EDGAR and market data; \u002Fanalyze, \u002Fscore, \u002Fcompare workflows with bundled Python tools (Claude Code, Cursor, Codex).","https:\u002F\u002Fgithub.com\u002Fjukeyman\u002Fjukeyman-skills\u002Fblob\u002Fmain\u002Fskills\u002Fxvary-stock-research\u002FLICENSE","https:\u002F\u002Fgithub.com\u002Fjukeyman\u002Fjukeyman-skills\u002Fblob\u002Fmain\u002Fskills\u002Fxvary-stock-research\u002FSKILL.md",[],[],{"skillNo":95,"name":96,"nameZh":6,"description":97,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":98,"categories":99,"keywords":100,"publishedAt":19},"01M79AHCYJ9FV9RMHQ24HDRN33","xss-vulnerability-scanner","Scan xss vulnerability scanner operations. Auto-activating skill for Security Fundamentals.\nTriggers on: xss vulnerability scanner, xss vulnerability scanner\nPart of the Security Fundamentals skill category. Use when working with xss vulnerability scanner functionality. Trigger with phrases like \"xss vulnerability scanner\", \"xss scanner\", \"xss\".","https:\u002F\u002Fgithub.com\u002Fjukeyman\u002Fjukeyman-skills\u002Fblob\u002Fmain\u002Fskills\u002Fxss-vulnerability-scanner\u002FSKILL.md",[],[]]