llama-cpp
Pass
Audited by Gen Agent Trust Hub on May 12, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The
convert_lora_to_gguf.pyscript clones the officialllama.cppsource code from its public GitHub repository (https://github.com/ggerganov/llama.cpp.git) to utilize the required conversion scripts and thegguf-pypackage. - [COMMAND_EXECUTION]: The skill relies on local execution of the
llama.cpptoolchain, includingllama-cli,llama-server, andfinetune. It usessubprocess.runto orchestrate model conversion, quantization, and server management. - [DATA_EXPOSURE]: The
ollama_model_path.shscript accesses the user's.ollama/modelsdirectory to resolve model hashes into local file paths. This is a functional requirement to enable direct inference on models already managed by Ollama without data duplication.
Audit Metadata