modal-deploy-ssh

SUSPICIOUS. The core Modal/SSH behavior is purpose-aligned and uses official Modal tooling, but the skill includes a high-risk optional provisioning feature that fetches and executes arbitrary shell scripts from user-supplied URLs with no same-org restriction, pinning, or checksum verification. This is not confirmed malware, but it materially raises the security risk above a benign developer workflow skill.