iblai-local-llm

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill explicitly documents that the runtime install_ollama command may download and execute the official installer via a curl | sh pattern (example: https://ollama.com/install.sh), which would fetch and run remote code during skill runtime.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The skill explicitly instructs implementing an installer command (install_ollama) that may write to /usr/local/bin, create systemd services and users via sudo, and otherwise perform system-level installs/changes, which directly involves privileged modifications to the host system.