modal
Pass
Audited by Gen Agent Trust Hub on Mar 31, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill documents the use of CLI tools like
modal run,modal deploy, andmodal token newto manage and execute cloud workloads. It also includes examples of usingsubprocess.runandsubprocess.Popenfor multi-GPU orchestration and serving web applications. - [EXTERNAL_DOWNLOADS]: The documentation describes methods for installing dependencies using
uv_pip_installandapt_installwithin container images. It provides examples of fetching source code from GitHub repositories belonging to the platform's official organization. - [REMOTE_CODE_EXECUTION]: The primary purpose of the documented platform is the remote execution of Python functions in a serverless environment. The skill explains how to define, deploy, and scale these remote functions across various hardware configurations, including GPUs.
- [CREDENTIALS_UNSAFE]: The skill explains how to authenticate with the platform using
modal token new, which generates a token in the user's local directory. It explicitly advocates for the use of themodal.Secretsystem to securely manage API keys and environment variables, discouraging hardcoded credentials.
Audit Metadata