JosiahSiegel/modal-sandboxes-knowledge
plugins/modal-sandboxes/skills/modal-sandboxes-knowledge/SKILL.md
This skill should be used when the user asks to run isolated or untrusted code on Modal.com. PROACTIVELY activate for: modal.Sandbox, safe user code execution, coding playgrounds, named sandboxes, PTY sessions, filesystem snapshots, timeout and resource limits, egress policies, sandbox lifecycle cleanup, terminate(), and security review for code execution. Provides: sandbox security checklist, lifecycle and cleanup patterns, egress/resource-limit recipes, and snapshot/PTY usage examples.
$ install --global
skillsauthnpx skillsauth add JosiahSiegel/claude-plugin-marketplace modal-sandboxes-knowledgeInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: May 22, 2026, 7:04 AM285.2s2 files scanned
SKILL.md
- name:
- modal-sandboxes-knowledge
- description:
- |
- This skill should be used when the user asks to run isolated or untrusted code on Modal.com. PROACTIVELY activate for:
- modal.Sandbox, safe user code execution, coding playgrounds, named sandboxes, PTY sessions, filesystem snapshots, timeout and resource limits, egress policies, sandbox lifecycle cleanup, terminate(), and security review for code execution.
- Provides:
- sandbox security checklist, lifecycle and cleanup patterns, egress/resource-limit recipes, and snapshot/PTY usage examples.
Modal Sandboxes Knowledge
Use this skill for Modal Sandbox design, security, and operations. For ordinary functions, GPU jobs, or deployment topics, use modal-compute:modal-compute-knowledge.
Essential security checklist
- Treat all submitted code and files as untrusted.
- Use explicit timeout, CPU, memory, and disk constraints.
- Prefer deny-by-default network egress; allow only required destinations.
- Clean up every sandbox with
terminate()or a scoped lifecycle. - Avoid passing long-lived credentials into sandbox environments unless strictly required.
- Capture stdout/stderr and return codes separately for auditing and debugging.
Common patterns
- One-shot execution: create a sandbox, run a command, collect output, terminate.
- Named sandbox: reuse a per-session sandbox for interactive workflows.
- PTY session: support shell-like interaction while preserving resource limits.
- Snapshot workflow: prebuild filesystem state, then launch from a known baseline.
Detailed reference
See references/sandboxes-code-execution.md for code examples and operational notes.
Related Skills
JosiahSiegel/clerk-sessions-webhooks-security
development
VerifiedTrustedCommunity
Use for Clerk sessions, tokens, webhooks, orgs, and security. PROACTIVELY activate for session tokens, JWT templates, getToken(), custom claims, pending sessions, multi-session UX, organizations, roles, permissions, system vs custom permissions, features/plans, MFA/passkeys/password policy/bot protection, Clerk webhooks, Svix signatures, verifyWebhook(), user/org sync, retries/replays, environment variables, custom domains, secret rotation, logs, and auth security reviews. Provides token semantics, webhook idempotency, authorization defaults, and hardening checklist.
45SKILL.mdUpdated Jun 19, 2026
JosiahSiegel/clerk-nextjs-auth
tools
VerifiedTrustedCommunity
Use for Clerk in Next.js. PROACTIVELY activate for @clerk/nextjs setup, App Router auth()/currentUser(), clerkMiddleware(), proxy.ts/middleware.ts, createRouteMatcher(), protected pages/layouts/Route Handlers/Server Actions/API routes/tRPC, auth.protect() role/permission/token checks, ClerkProvider placement, server-only clerkClient, Link prefetch, redirects, 401/404 auth failures, custom domains, __clerk proxy paths, and deployment gotchas. Provides file patterns, server/client boundary rules, matcher templates, and production checks.
45SKILL.mdUpdated Jun 19, 2026
JosiahSiegel/clerk-frontend-sdks
development
VerifiedTrustedCommunity
Use for Clerk frontend auth flows. PROACTIVELY activate for React, JavaScript, Vue, Nuxt, Astro, Expo, React Router, TanStack React Start, or SPA setup; ClerkProvider and publishable-key wiring; SignIn/SignUp/UserButton/UserProfile/OrganizationSwitcher; custom useUser/useAuth/useClerk/useSignIn/useSignUp/useSession/useOrganization flows; multi-session UX; cross-origin getToken() fetches; loading states, redirects, routing, CORS/cookies, or hydration bugs. Provides SDK selection, UI patterns, token-fetch templates, and frontend gotchas.
45SKILL.mdUpdated Jun 19, 2026
JosiahSiegel/clerk-environments-deployment
development
VerifiedTrustedCommunity
Use for Clerk dev/prod readiness, deployment, and multi-language implementation planning. PROACTIVELY activate for environment variables, pk_test/sk_test vs pk_live/sk_live, local dev, preview/staging/prod instances, domains/DNS, redirects, OAuth credentials, custom domains/proxy, authorizedParties, CSP, CORS/cookies, webhooks/tunnels, Vercel/Netlify/Cloudflare/API gateways, monitoring/troubleshooting, and backends in Node/Express/Fastify, Python/FastAPI/Django/Flask, Go, Ruby/Rails, Java/Spring, .NET, PHP/Laravel. Provides checklists, rollout plans, and language-portable patterns.
45SKILL.mdUpdated Jun 19, 2026