modal-serverless-gpu
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
- [SAFE]: The skill provides comprehensive and secure documentation for using the Modal serverless platform. All code examples represent standard platform operations and follow security best practices for handling API tokens and remote dependencies.
- [INDIRECT_PROMPT_INJECTION]: The skill describes building web endpoints and processing external data, which introduces a potential surface for indirect prompt injection.
- Ingestion points: Web endpoints and WebSocket listeners defined in
SKILL.mdandreferences/advanced-usage.md. - Boundary markers: Code snippets show basic FastAPI structures; explicit prompt boundary markers are not demonstrated.
- Capability inventory: The skill facilitates command execution via
subprocess.runand provides interactive sandbox environments viamodal.Sandbox. - Sanitization: Examples use standard Python and FastAPI type hinting for input validation.
- [EXTERNAL_DOWNLOADS]: The skill documents the installation of necessary ML libraries and platform tools from public registries and official repositories.
- Installs the
modalCLI and dependencies such astorch,transformers, andaccelerate. - References the official Hugging Face
transformersrepository for specific Git-based installations. - [COMMAND_EXECUTION]: Instructions include the use of system commands for verifying environment configurations and launching distributed training jobs.
- Uses
subprocess.runto callnvidia-smifor GPU health checks. - Uses
torch.distributed.launchfor parallel training orchestration. - [DYNAMIC_EXECUTION]: The skill provides guidance on using isolated execution environments for running arbitrary code.
- Demonstrates the use of
modal.Sandboxto execute Python code in a containerized environment.
Audit Metadata