local-llm

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill includes an installation command that fetches and immediately executes remote code (curl -fsSL https://ollama.com/install.sh | sh), which downloads and runs external scripts as a required setup step, posing a high-risk runtime dependency.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). The prompt explicitly instructs running system-level installation and service management commands (e.g., curl ... | sh and sudo systemctl enable/start ollama), which modify system services and require elevated privileges, so it pushes the agent to change the machine state.