add-ollama-provider

Fail

Audited by Gen Agent Trust Hub on Apr 26, 2026

Risk Level: HIGHCOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill recommends setting the container's home directory permissions to world-writable (chmod 777) in the Dockerfile. This is a high-severity security anti-pattern that can lead to privilege escalation by allowing any local user to modify files within the container environment.\n- [COMMAND_EXECUTION]: Instructions guide the agent to directly modify the application's TypeScript source code files (src/container-config.ts and src/container-runner.ts) to inject logic for environment variable overrides and host blocking.\n- [COMMAND_EXECUTION]: The skill uses sqlite3 to query sensitive information from the local database (data/v2.db), including agent group identifiers and folder paths.\n- [COMMAND_EXECUTION]: The skill instructs the agent to restart system services using launchctl on macOS or systemctl on Linux, which impacts the persistence and availability of the local orchestration layer.\n- [COMMAND_EXECUTION]: The skill performs Docker management operations, including inspecting container configurations and executing commands inside running containers to verify environment variables.
Recommendations
  • AI detected serious security threats
Audit Metadata
Risk Level
HIGH
Analyzed
Apr 26, 2026, 09:50 PM