kev-deploy
Pass
Audited by Gen Agent Trust Hub on Oct 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches the
kev_serve.pydeployment script and thekevlibrary from the author's GitHub repository (github.com/jaredpalmer/kev). These are official vendor resources required for the model's operation. - [COMMAND_EXECUTION]: The skill uses the
modalCLI to automate the provisioning of cloud infrastructure, including deploying the server, setting up volumes for model weights, and managing the application lifecycle. - [INDIRECT_PROMPT_INJECTION]: The skill creates an API that accepts external text inputs for classification.
- Ingestion points: The
statefield in the/v1/systemoneAPI endpoint inscripts/kev_serve.pyreceives untrusted data. - Boundary markers: None explicitly defined in the deployment script; input is passed directly to the model's server logic.
- Capability inventory:
scripts/kev_serve.pyperforms network operations to serve the API viauvicornand writes cached model weights to a Modal volume usingcache.commit(). - Sanitization: The underlying 'Kev' model is a specialized classifier that produces structured output (choices and scores) rather than free-form text, which restricts the potential for malicious instructions to influence downstream systems.
Audit Metadata