modal-deploy-ssh

Pass

Audited by Gen Agent Trust Hub on Oct 18, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The script scripts/modal_ssh_session.py uses the subprocess module to call the modal CLI for cloud operations and the ssh client for session verification and provisioning.
  • [EXTERNAL_DOWNLOADS]: The launch command supports a --provision flag that fetches a shell script from a GitHub Gist (a well-known service) to configure the remote Modal instance.
  • [REMOTE_CODE_EXECUTION]: The skill can execute a remote shell script using a curl | bash pattern on the newly created Modal instance via SSH. This is a documented feature for setting up the cloud development environment.
  • [DATA_EXPOSURE]: The skill reads and modifies the local ~/.ssh/config file to manage connection aliases and reads the public SSH key (~/.ssh/id_ed25519.pub) to authorize access. These actions are limited to the skill's primary purpose and include proper file permission management (0600).
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 18, 2026, 04:30 AM