add-ollama-provider

Warn

Audited by Gen Agent Trust Hub on Aug 25, 2026

Risk Level: MEDIUMCOMMAND_EXECUTIONDATA_EXFILTRATIONSAFE
Full Analysis
  • [PRIVILEGE_ESCALATION]: The skill instructs the user to change the permissions of the /home/node directory within the container's Dockerfile to 777. This makes the directory world-writable, allowing any user on the system to modify its contents, which is a significant security risk.
  • [COMMAND_EXECUTION]: The skill performs multiple shell operations that modify the local environment, including:
  • Using grep and pnpm to query and modify source code files (src/container-config.ts, src/container-runner.ts).
  • Using launchctl to unload and load system services.
  • Executing docker commands to inspect and modify running containers.
  • [DATA_EXPOSURE]: The skill executes database queries against data/v2.db to extract agent group folders, names, and IDs, exposing internal application state to the shell environment.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Aug 25, 2026, 10:24 PM
Security Audit — agent-trust-hub — add-ollama-provider