run-experiment-013cee — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited run-experiment-013cee (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Deploy and run ML experiment: $ARGUMENTS
Read the project's CLAUDE.md to determine the experiment environment:
gpu: local): Look for local CUDA/MPS setup infogpu: remote): Look for SSH alias, conda env, code directorygpu: vast): Check for vast-instances.json at project root — if a running instance exists, use it. Also check CLAUDE.md for a ## Vast.ai section.gpu: modal): Serverless GPU via Modal. No SSH, no Docker, auto scale-to-zero. Delegate to /serverless-modal.Modal detection: If CLAUDE.md has gpu: modal or a ## Modal section, the entire deployment is handled by /serverless-modal. Jump to Step 4: Deploy (Modal) — Steps 2-3 are not needed (Modal handles code sync and GPU allocation automatically).
Vast.ai detection priority:
CLAUDE.md has gpu: vast or a ## Vast.ai section:vast-instances.json exists and has a running instance → use that instance/vast-gpu provision which analyzes the task, presents cost-optimized GPU options, and rents the user's choiceCLAUDE.md, ask the user.Check GPU availability on the target machine:
Remote (SSH):
ssh <server> nvidia-smi --query-gpu=index,memory.used,memory.total --format=csv,noheaderRemote (Vast.ai):
ssh -p <PORT> root@<HOST> nvidia-smi --query-gpu=index,memory.used,memory.total --format=csv,noheader(Read ssh_host and ssh_port from vast-instances.json, or run vastai ssh-url <INSTANCE_ID> which returns ssh://root@HOST:PORT)
Local:
nvidia-smi --query-gpu=index,memory.used,memory.total --format=csv,noheader
# or for Mac MPS:
python -c "import torch; print('MPS available:', torch.backends.mps.is_available())"Free GPU = memory.used < 500 MiB.
Check the project's CLAUDE.md for a code_sync setting. If not specified, default to rsync.
#### Option A: rsync (default)
Only sync necessary files — NOT data, checkpoints, or large files:
rsync -avz --include='*.py' --exclude='*' <local_src>/ <server>:<remote_dst>/#### Option B: git (when code_sync: git is set in CLAUDE.md)
Push local changes to remote repo, then pull on the server:
# 1. Push from local
git add -A && git commit -m "sync: experiment deployment" && git push
# 2. Pull on server
ssh <server> "cd <remote_dst> && git pull"Benefits: version-tracked, multi-server sync with one push, no rsync include/exclude rules needed.
#### Option C: Vast.ai instance
Sync code to the vast.ai instance (always rsync, code dir is /workspace/project/):
rsync -avz -e "ssh -p <PORT>" \
--include='*.py' --include='*.yaml' --include='*.yml' --include='*.json' \
--include='*.txt' --include='*.sh' --include='*/' \
--exclude='*.pt' --exclude='*.pth' --exclude='*.ckpt' \
--exclude='__pycache__' --exclude='.git' --exclude='data/' \
--exclude='wandb/' --exclude='outputs/' \
./ root@<HOST>:/workspace/project/If requirements.txt exists, install dependencies:
scp -P <PORT> requirements.txt root@<HOST>:/workspace/
ssh -p <PORT> root@<HOST> "pip install -q -r /workspace/requirements.txt"wandb: true in CLAUDE.md)Skip this step entirely if `wandb` is not set or is `false` in CLAUDE.md.
Before deploying, ensure the experiment scripts have W&B logging:
import wandb or wandb.init. If present, skip to Step 4. import wandb
wandb.init(project=WANDB_PROJECT, name=EXP_NAME, config={...hyperparams...})
# Inside training loop:
wandb.log({"train/loss": loss, "train/lr": lr, "step": step})
# After eval:
wandb.log({"eval/loss": eval_loss, "eval/ppl": ppl, "eval/accuracy": acc})
# At end:
wandb.finish()train/loss — training loss per steptrain/lr — learning rateeval/loss, eval/ppl, eval/accuracy — eval metrics per epochgpu/memory_used — GPU memory (via torch.cuda.max_memory_allocated())speed/samples_per_sec — throughput ssh <server> "wandb status" # should show logged in
# If not logged in:
ssh <server> "wandb login <WANDB_API_KEY>"The W&B project name and API key come from CLAUDE.md (see example below). The experiment name is auto-generated from the script name + timestamp.#### Remote (via SSH + screen)
For each experiment, create a dedicated screen session with GPU binding:
ssh <server> "screen -dmS <exp_name> bash -c '\
eval \"\$(<conda_path>/conda shell.bash hook)\" && \
conda activate <env> && \
CUDA_VISIBLE_DEVICES=<gpu_id> python <script> <args> 2>&1 | tee <log_file>'"#### Vast.ai instance
No conda needed — the Docker image has the environment. Use /workspace/project/ as working dir:
ssh -p <PORT> root@<HOST> "screen -dmS <exp_name> bash -c '\
cd /workspace/project && \
CUDA_VISIBLE_DEVICES=<gpu_id> python <script> <args> 2>&1 | tee /workspace/<log_file>'"After launching, update the experiment field in vast-instances.json for this instance.
#### Modal (serverless)
When gpu: modal is detected, delegate to /serverless-modal:
modal_launcher.py that wraps the training script using modal.Mount.from_local_dir for code and modal.Volume for resultsmodal run modal_launcher.py (runs locally, GPU executes remotely)Key Modal settings from CLAUDE.md:
modal_gpu: GPU override (default: auto-select based on VRAM analysis)modal_timeout: Max seconds (default: 21600 = 6 hours)modal_volume: Named volume for persistent resultsNo SSH, no code sync, no screen sessions needed. Modal handles everything.
#### Local
# Linux with CUDA
CUDA_VISIBLE_DEVICES=<gpu_id> python <script> <args> 2>&1 | tee <log_file>
# Mac with MPS (PyTorch uses MPS automatically)
python <script> <args> 2>&1 | tee <log_file>For local long-running jobs, use run_in_background: true to keep the conversation responsive.
Remote (SSH):
ssh <server> "screen -ls"Remote (Vast.ai):
ssh -p <PORT> root@<HOST> "screen -ls"Modal:
modal app list # Check app is running
modal app logs <app> # Stream logsLocal: Check process is running and GPU is allocated.
After deployment is verified, check ~/.claude/feishu.json:
experiment_done notification: which experiments launched, which GPUs, estimated time"off": skip entirely (no-op)gpu: vast and auto_destroy: true)Skip this step if not using vast.ai or `auto_destroy` is `false`.
After the experiment completes (detected via /monitor-experiment or screen session ending):
rsync -avz -e "ssh -p <PORT>" root@<HOST>:/workspace/project/results/ ./results/ scp -P <PORT> root@<HOST>:/workspace/*.log ./logs/ vastai destroy instance <INSTANCE_ID>destroyed. Vast.ai instance <ID> auto-destroyed.
- Duration: ~X.X hours
- Estimated cost: ~$X.XX
- Results saved to: ./results/This ensures users are never billed for idle instances. When auto_destroy: true (the default), the full lifecycle is automatic: rent → setup → run → collect → destroy.tee to save logs for later inspectionrun_in_background: true to keep conversation responsivegpu: vast, always report the running cost. If auto_destroy: true, destroy the instance as soon as all experiments on it completeUsers should add their server info to their project's CLAUDE.md:
## Remote Server
- gpu: remote # use pre-configured SSH server
- SSH: `ssh my-gpu-server`
- GPU: 4x A100 (80GB each)
- Conda: `eval "$(/opt/conda/bin/conda shell.bash hook)" && conda activate research`
- Code dir: `/home/user/experiments/`
- code_sync: rsync # default. Or set to "git" for git push/pull workflow
- wandb: false # set to "true" to auto-add W&B logging to experiment scripts
- wandb_project: my-project # W&B project name (required if wandb: true)
- wandb_entity: my-team # W&B team/user (optional, uses default if omitted)
## Vast.ai
- gpu: vast # rent on-demand GPU from vast.ai
- auto_destroy: true # auto-destroy after experiment completes (default: true)
- max_budget: 5.00 # optional: max total $ to spend per experiment
## Modal
- gpu: modal # serverless GPU via Modal (no SSH, auto scale-to-zero)
- modal_gpu: A100-80GB # optional: override GPU selection (default: auto-select)
- modal_timeout: 21600 # optional: max seconds (default: 6 hours)
- modal_volume: my-results # optional: named volume for results persistence
## Local Environment
- gpu: local # use local GPU
- Mac MPS / Linux CUDA
- Conda env: `ml` (Python 3.10 + PyTorch)Vast.ai setup: Runpip install vastai && vastai set api-key YOUR_KEY. Upload your SSH public key at https://cloud.vast.ai/manage-keys/. Setgpu: vastin yourCLAUDE.md—/run-experimentwill automatically rent an instance, run the experiment, and destroy it when done.
Modal setup: Runpip install modal && modal setup. Bind a payment method at https://modal.com/settings (NEVER through CLI) to unlock the full $30/month free tier (without card: $5/month only). Set a workspace spending limit to prevent accidental charges. Setgpu: modalin yourCLAUDE.md— ideal for users without a local GPU who need to debug code or run small-scale tests.
W&B setup: Runwandb loginon your server once (or setWANDB_API_KEYenv var). The skill reads project/entity from CLAUDE.md and addswandb.init()+wandb.log()to your training scripts automatically. Dashboard:https://wandb.ai/<entity>/<project>.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.