Ollama
Pass
Audited by Gen Agent Trust Hub on Oct 30, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
ollamaCLI commands andcurlto manage local model runtimes, pull model weights, and interact with the local API on127.0.0.1:11434. Standard commands likeollama list,ollama ps, andollama showare used for environment verification. - [EXTERNAL_DOWNLOADS]: Fetches model weights and documentation from official Ollama infrastructure (
ollama.com). It also references resources from the vendor's own domain (clawic.com) for documentation and updates. - [INDIRECT_PROMPT_INJECTION]: The skill processes external data including model responses and retrieved chunks for RAG workflows, which could contain malicious instructions.
- Ingestion points: Model outputs from the local API (documented in
api-patterns.md) and retrieved text chunks from the local corpus (documented inembeddings-and-rag.md). - Boundary markers: The skill recommends using
format: "json"and non-streaming responses for deterministic parsing to mitigate accidental instruction obedience. - Capability inventory: Uses
curlfor network requests and theollamaCLI for model creation and process management. - Sanitization: Recommends validating parsed JSON results before taking downstream actions and using explicit model tags to prevent drifting capabilities.
Audit Metadata