remote-compute-modal
Warn
Audited by Snyk on Jul 2, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).
- Potentially malicious external URL detected (high risk: 0.90). The skill's compute_provider build/hydrate steps run at runtime and fetch+install remote code and large model blobs that are executed/used (e.g. pip installs from git+https://github.com/Biohub/esm.git and git+https://github.com/Biohub/transformers.git, git clone https://github.com/dauparas/ProteinMPNN.git, wget https://storage.googleapis.com/alphafold/alphafold_params_2022-12-06.tar, and huggingface_hub snapshot_download calls), so these external URLs are required runtime dependencies that retrieve and enable remote-executed code/assets.
Issues (1)
W012
MEDIUMUnverifiable external dependency detected (runtime URL that controls agent).
Audit Metadata