Security checks across malware telemetry and agentic risk
This appears to be a legitimate startup-advisor skill, but it needs Review because its web/server features can expose or retain sensitive business-plan data in under-disclosed ways.
Install only if you are comfortable with a local web server, external LLM/provider calls, and local/browser persistence of startup-plan content. Keep the server bound to localhost unless you add authentication, TLS, and firewall controls; do not embed the widget on production sites until message rendering is sanitized; avoid uploading confidential PDFs unless you have chosen and trust the configured LLM/SaaS/Supabase destinations; and periodically clear localStorage/history/profile data.
def _ollama_available() -> bool:
"""Ollama 서버 응답 여부 확인 (3초 타임아웃)."""
try:
urllib.request.urlopen(f"{OLLAMA_URL}/api/tags", timeout=3)
return True
except Exception:
return Falsedef _ollama_available() -> bool:
"""Ollama 서버 응답 여부 확인 (3초 타임아웃)."""
try:
urllib.request.urlopen(f"{OLLAMA_URL}/api/tags", timeout=3) # nosec B310
return True
except Exception:
return False64/64 vendors flagged this skill as clean.