add-ollama-provider
Warn
Audited by Gen Agent Trust Hub on Aug 25, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONDATA_EXFILTRATIONSAFE
Full Analysis
- [PRIVILEGE_ESCALATION]: The skill instructs the user to change the permissions of the
/home/nodedirectory within the container's Dockerfile to777. This makes the directory world-writable, allowing any user on the system to modify its contents, which is a significant security risk. - [COMMAND_EXECUTION]: The skill performs multiple shell operations that modify the local environment, including:
- Using
grepandpnpmto query and modify source code files (src/container-config.ts,src/container-runner.ts). - Using
launchctlto unload and load system services. - Executing
dockercommands to inspect and modify running containers. - [DATA_EXPOSURE]: The skill executes database queries against
data/v2.dbto extract agent group folders, names, and IDs, exposing internal application state to the shell environment.
Audit Metadata