modal-serverless-gpu
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a legitimate technical resource and template collection for the Modal serverless GPU cloud service. All provided code examples align with standard usage of the official
modallibrary. - [COMMAND_EXECUTION]: The skill includes code snippets using
subprocess.runto executenvidia-smifor GPU diagnostics andtorch.distributed.launchfor training orchestration. These are standard operations for the described ML workloads. - [EXTERNAL_DOWNLOADS]: The documentation references downloading dependencies and container images from well-known and trusted sources, including the official NVIDIA container registry and Hugging Face's GitHub repository.
- [INDIRECT_PROMPT_INJECTION]: The skill provides examples of web endpoints and S3 bucket mounts that ingest external data. While this creates a potential attack surface for the user's deployed applications, the skill correctly demonstrates the use of
modal.Secretfor secure credential management and provides standard patterns for handling input data. - [DYNAMIC_EXECUTION]: The skill mentions
modal.Sandboxfor running code in isolated environments, which is a core platform feature used for safe execution of untrusted workloads.
Audit Metadata