modal

Pass

Audited by Gen Agent Trust Hub on Mar 31, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill documents the use of CLI tools like modal run, modal deploy, and modal token new to manage and execute cloud workloads. It also includes examples of using subprocess.run and subprocess.Popen for multi-GPU orchestration and serving web applications.
  • [EXTERNAL_DOWNLOADS]: The documentation describes methods for installing dependencies using uv_pip_install and apt_install within container images. It provides examples of fetching source code from GitHub repositories belonging to the platform's official organization.
  • [REMOTE_CODE_EXECUTION]: The primary purpose of the documented platform is the remote execution of Python functions in a serverless environment. The skill explains how to define, deploy, and scale these remote functions across various hardware configurations, including GPUs.
  • [CREDENTIALS_UNSAFE]: The skill explains how to authenticate with the platform using modal token new, which generates a token in the user's local directory. It explicitly advocates for the use of the modal.Secret system to securely manage API keys and environment variables, discouraging hardcoded credentials.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 31, 2026, 08:22 AM
Security Audit — agent-trust-hub — modal