modal
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs users to install the
modalpackage via pip and specifies dependencies liketorch,transformers, andnumpyfor container images. These are well-known packages used for the platform's intended serverless compute purpose. - [COMMAND_EXECUTION]: Provides standard CLI commands for the Modal platform, including
modal token newfor authentication, andmodal run/modal deployfor executing and deploying serverless functions. - [INDIRECT_PROMPT_INJECTION]: The skill demonstrates building web endpoints and ML serving classes that process external data, creating a potential surface for indirect prompt injection if the ingested data is used in LLM prompts.
- Ingestion points: Untrusted data enters the skill via the
predict(data: dict)web endpoint and thepredict(self, text: str)method in the ML Model Serving section ofSKILL.md. - Boundary markers: The provided code snippets do not include explicit delimiters or instructions to ignore embedded directives in the input data.
- Capability inventory: The skill provides capabilities for remote code execution on serverless infrastructure, network API exposure, and GPU-accelerated computation.
- Sanitization: The example code does not include input validation or sanitization routines for the data processed by the models or endpoints.
Audit Metadata