inference-serving-llama-cpp
Pass
Audited by Gen Agent Trust Hub on Nov 3, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides documentation and installation instructions for llama.cpp, a well-known and reputable open-source project for local machine learning inference. The behavior described is entirely consistent with its stated purpose.
- [EXTERNAL_DOWNLOADS]: Instructions include cloning the project from its official GitHub repository and downloading models from Hugging Face. These platforms are considered well-known and trusted services in the AI community. All download references are handled neutrally as they are necessary for the skill's functionality.
- [COMMAND_EXECUTION]: The skill provides command-line examples for building the software from source using standard tools like
makeandbrew. It also details how to run the inference binary and server locally. These commands are typical for developers setting up local inference environments and do not involve suspicious or unauthorized execution patterns. - [INDIRECT_PROMPT_INJECTION]: The skill defines an interface for processing natural language prompts through the llama.cpp server and CLI. While this creates a surface for potential prompt injection, the skill itself provides the infrastructure rather than automating the ingestion of untrusted external data without sanitization. The risk is consistent with standard LLM serving applications.
Audit Metadata