modal

Pass

Audited by Gen Agent Trust Hub on Jun 13, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill initiates the installation of the Modal SDK and various third-party libraries. * Evidence: uv pip install modal in SKILL.md. * Evidence: References to installing packages like vllm, torch, and transformers in references/examples.md and references/images.md.
  • [COMMAND_EXECUTION]: The skill utilizes shell commands for environment configuration and process management. * Evidence: Use of apt_install and run_commands for container image building in references/images.md. * Evidence: Examples using subprocess.run and subprocess.Popen to launch training scripts and web servers in references/gpu.md and references/web-endpoints.md.
  • [REMOTE_CODE_EXECUTION]: The skill's primary function is orchestrating the remote execution of Python code in cloud containers. * Evidence: Use of the @app.function decorator and .remote() method calls throughout the documentation for serverless compute. * Evidence: Guidance on using modal.Sandbox for executing untrusted dynamically generated code in SKILL.md and references/api_reference.md.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 13, 2026, 06:24 AM