mistral-codestral

Pass

Audited by Gen Agent Trust Hub on Jun 18, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs the user to install the ollama-herd Python package from a public registry. This is a vendor-owned package intended for managing the local fleet router described in the documentation.
  • [COMMAND_EXECUTION]: The skill uses curl to interact with a local API service on localhost:11435 to manage models and monitor fleet status.
  • Automated scans flagged commands like curl ... | python3 as potential remote code execution. However, detailed analysis shows these commands use python3 -m json.tool, which is a standard utility for pretty-printing JSON data and does not involve executing arbitrary code from the network.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 18, 2026, 11:02 PM
Security Audit — agent-trust-hub — mistral-codestral