4 Commits

Author SHA1 Message Date
Alex Trotta e9098e9841 [lint] Fix EXE001 lints
Removing the bad lines, if people want this functionality for their
scripts they can go back and mark it as excecutable. This won't break
anything.

MODULAR_ORIG_COMMIT_REV_ID: 529c5c5fcf3c33ba314d3c74816fc6bfefe4ed52
2026-08-19 20:37:34 +00:00
Ehsan M. Kermani 29d8b0cae8 [Skills] Fix Snyk/Socket security findings in skills
Remove the curl-pipe-to-shell installer commands from serve-model,
tighten
the transformers version floor in import-model to exclude releases
vulnerable to disclosed RCE and deserialization CVEs, and drop
shell=True
from a subprocess call in profile-model. These mirror the fix already
applied to new-modular-project for a prior report, and close out the
flagged findings from the skills.sh security dashboard without changing
any documented behavior.
MODULAR_ORIG_COMMIT_REV_ID: fb99b3cbe0fc3a3b76e88a546e0060210ea7481c
2026-08-16 21:28:29 +00:00
Scott Main 86952dc23a [docs][skills] Install max instead of modular
Update various instances of install commands to use `max[all]` or other
packages as appropriate (remove some if not necessary).

MODULAR_ORIG_COMMIT_REV_ID: 9e93b8476c329efd90953b1be1637cf3afb57d0a
2026-08-05 07:43:07 +00:00
Patrick Rachford d7b3c60201 [Skills] Add profile-model skill for profiling MAX inference
Add an open-source agent skill that profiles a model running on MAX to
find where it spends time and whether the GPU is saturated.

MODULAR_ORIG_COMMIT_REV_ID: e07a5d58699fd13b8bff5022cf6b160e74eb6a92
2026-06-27 07:28:31 +00:00