add-ollama-tool
Pass
Audited by Gen Agent Trust Hub on Aug 22, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements a standard stdio-based MCP server to bridge the agent with a local Ollama daemon. All network communications are directed to the user-controlled Ollama host (defaulting to localhost or the Docker host gateway).
- [SAFE]: Tool arguments are strictly validated using Zod schemas before being processed or passed to the Ollama API, preventing common injection vulnerabilities.
- [SAFE]: The integration logic for environment variable forwarding and service registration is isolated in modular files and verified by structural automated tests to ensure correct installation.
- [SAFE]: Model downloads and management tools target the official Ollama registry, which is a well-known and trusted service.
Audit Metadata