Security checks across malware telemetry and agentic risk
This appears to be a legitimate Ganglion operator guide, but it is always-on and includes powerful commands for uploading code, changing agent behavior, and rolling back project state without enough guardrails.
Install only if you intend to administer Ganglion. Keep the HTTP bridge bound to localhost or otherwise strongly protected, review any tool/agent/MCP code before registration, commit or back up the project before mutations or rollback, protect the OpenAI API key, and isolate knowledge stores between trusted and untrusted experiments.
4. **Register a new tool:**
```bash
curl -s -X POST "$GANGLION_URL/v1/tools" \
-H "Content-Type: application/json" \
-d '{
"name": "evaluate_model",### Register a Tool
```bash
curl -s -X POST "$GANGLION_URL/v1/tools" \
-H "Content-Type: application/json" \
-d '{
"name": "analyze_results",### Register a Tool (Validation Failure)
```bash
curl -s -X POST "$GANGLION_URL/v1/tools" \
-H "Content-Type: application/json" \
-d '{"name": "bad_tool", "code": "def bad_tool(x):\n pass", "category": "misc"}' | jq
```### Patch Pipeline
```bash
curl -s -X PATCH "$GANGLION_URL/v1/pipeline" \
-H "Content-Type: application/json" \
-d '{
"operations": [### Update a Prompt
```bash
curl -s -X POST "$GANGLION_URL/v1/prompts" \
-H "Content-Type: application/json" \
-d '{
"agent_name": "Trainer",### Register a New Tool
```bash
curl -s -X POST "$GANGLION_URL/v1/tools" \
-H "Content-Type: application/json" \
-d '{
"name": "my_tool",### Register a New Agent
```bash
curl -s -X POST "$GANGLION_URL/v1/agents" \
-H "Content-Type: application/json" \
-d '{
"name": "MyAgent",curl -s "$GANGLION_URL/v1/pipeline" | jq '.data.stages[].name'
```
4. **Register a new tool:**
```bash
curl -s -X POST "$GANGLION_URL/v1/tools" \
-H "Content-Type: application/json" \66/66 vendors flagged this skill as clean.