ClawHub

RamaLama CLI

v1.0.0

Run and interact with AI agents.

⭐ 0· 484·0 current·0 all-time
byIan Eaves@ieaves
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description (run and interact with AI agents) align with declared requirements: the skill needs the 'ramalama' binary and optionally docker/podman. Those are appropriate and expected for a CLI that runs local/ containerized models.
✓
Instruction Scope
SKILL.md only instructs the agent to run ramalama commands and related tooling (docker/podman, curl, lsof). It does not instruct reading unrelated system files, harvesting environment variables, or exfiltrating data to unknown endpoints. Serving an OpenAI-compatible endpoint is noted, which is expected for this tool.
ℹ
Install Mechanism
Install specs use package managers (brew and a 'uv' formula) to provide the 'ramalama' binary. Brew is a common, low-risk path; 'uv' is less widely known—verify the uv provider and formula source before trusting it. No direct URL downloads or archive extraction are used in the manifest.
✓
Credentials
The skill requests no environment variables or credentials. The documented commands may contact model hubs (hf://, rlcr://, etc.) to pull models, which implies network access but is proportional to the stated purpose.
✓
Persistence & Privilege
always:false and normal autonomous invocation settings are used. The skill doesn't request persistent system-wide privileges, nor does it modify other skills' configs in the instructions.
Assessment
This skill appears to do what it says: it expects a local 'ramalama' binary and (optionally) a container runtime and documents how to use them. Before installing/use: (1) verify the source of the ramalama package (brew tap or the 'uv' formula) to ensure you trust the distributor; (2) be mindful that running 'serve' exposes an HTTP API — protect it with network controls or auth if you will serve sensitive data; (3) model pulls will download potentially large files and use significant CPU/GPU/memory and network bandwidth; (4) when running in containers, ensure images and mounts are trusted and avoid mounting sensitive host paths into model containers. If you need higher assurance, ask the publisher for a canonical homepage/repository or an official release URL for the ramalama binary before installing.

Like a lobster shell, security has layers — review code before you run it.

latestvk97eehnqnt7mgdhnjvbm7jqzns81gjzw

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🦙 Clawdis
Binsramalama
Any bindocker, podman

Install

Install ramalama CLI (brew)
Bins: ramalama
brew install ramalama
Install ramalama CLI (uv)
Bins: ramalama

Comments