ollama-optimizer
Warn
Audited by Gen Agent Trust Hub on Nov 6, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONPERSISTENCEDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local Python scripts (
detect_system.pyandbenchmark_ollama.py) to profile system hardware, running commands such asnvidia-smi,sysctl, andwmic. It also generates shell commands to configure environment variables and manage the Ollama service. - [PRIVILEGE_ESCALATION]: The skill utilizes
sudoon Linux to create systemd drop-in configuration files and restart system services. It implements safety guidelines requiring explicit user consent before executing these commands. - [PERSISTENCE]: To ensure optimizations survive reboots, the skill modifies shell initialization files like
~/.zshrcor~/.bashrcand creates persistent systemd units. It mitigates the risk of system instability by creating backups of modified configuration files. - [DYNAMIC_EXECUTION]: The skill contains a 'Self-Improve' section that authorizes the agent to modify the skill's own instructions or reference documents based on observed environmental issues or user preferences.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from hardware profiling scripts and user-provided inputs. While the data is parsed as JSON, the resulting values directly influence the agent's logic for tier classification and system modification, presenting an attack surface for indirect influence over agent behavior.
Audit Metadata