modal-deploy-ssh
Pass
Audited by Gen Agent Trust Hub on Oct 18, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/modal_ssh_session.pyuses thesubprocessmodule to call themodalCLI for cloud operations and thesshclient for session verification and provisioning. - [EXTERNAL_DOWNLOADS]: The
launchcommand supports a--provisionflag that fetches a shell script from a GitHub Gist (a well-known service) to configure the remote Modal instance. - [REMOTE_CODE_EXECUTION]: The skill can execute a remote shell script using a
curl | bashpattern on the newly created Modal instance via SSH. This is a documented feature for setting up the cloud development environment. - [DATA_EXPOSURE]: The skill reads and modifies the local
~/.ssh/configfile to manage connection aliases and reads the public SSH key (~/.ssh/id_ed25519.pub) to authorize access. These actions are limited to the skill's primary purpose and include proper file permission management (0600).
Audit Metadata