Security audit
Security checks for vulnerabilities and agentic risk
This is a straightforward Ollama helper with disclosed local checks and optional saved setup notes, with minor privacy considerations around what users choose to store.
Install only if you want Codex-style help managing Ollama. Before enabling persistence, decide what may be written under ~/ollama/ and keep secrets, API keys, private documents, prompts, transcripts, and sensitive network details out of those notes. Do not approve remote Ollama exposure or optional cloud execution unless you understand what data leaves the machine.
## API Does Not Respond Symptoms: - `curl http://127.0.0.1:11434/api/tags` fails - local apps report connection refused Checks:
This skill NEVER: - claim that every Ollama model supports the same tools, context, or JSON reliability - recommend unauthenticated remote exposure as a default - treat local RAG quality as solved without checking embeddings, chunking, and retrieval results - modify its own skill files ## Related Skills
Inspect a specific model before promising capabilities:
```bash
curl -s http://127.0.0.1:11434/api/show -d '{
"model": "MODEL:TAG"
}' | jq '{capabilities, details, model_info}'
```Prefer non-streaming when the next step needs deterministic parsing:
```bash
curl -s http://127.0.0.1:11434/api/chat -d '{
"model": "MODEL:TAG",
"messages": [
{"role": "system", "content": "Return one short answer."},Prefer non-streaming when the next step needs deterministic parsing:
```bash
curl -s http://127.0.0.1:11434/api/chat -d '{
"model": "MODEL:TAG",
"messages": [
{"role": "system", "content": "Return one short answer."},## Native Embedding Check
```bash
curl -s http://127.0.0.1:11434/api/embed -d '{
"model": "embeddinggemma",
"input": "hello world"
}' | jq '.embeddings[0] | length'No suspicious patterns detected.