llamafile
Pass
Audited by Gen Agent Trust Hub on Oct 3, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides commands to download binaries and model files from official and well-known sources, including GitHub (mozilla-ai) and Hugging Face (mozilla-ai). These are established organizations, and the downloads are consistent with the skill's primary purpose of setting up local LLM inference.
- [COMMAND_EXECUTION]: The instructions include standard shell commands for making files executable (
chmod 755), verifying versions, and starting the local server process. These actions are transparent and necessary for the stated functionality. - [DYNAMIC_EXECUTION]: The skill includes a Python utility script that uses
subprocess.Popento manage the llamafile server as a background process. The implementation follows best practices, including a health check loop usinghttpxto ensure the server is ready before returning control.
Audit Metadata