Security audit
Security checks for vulnerabilities and agentic risk
This skill has a coherent local AI server purpose, but its setup asks users to run unverified installers, create always-on services, and expose an unauthenticated HTTP API/dashboard on the network.
Install only in a trusted environment after reviewing the Ollama installer and ollama-herd package provenance. Prefer pinned versions, hashes or signatures, and a dedicated virtual environment. Bind the service to localhost, a VPN, or a tightly allowlisted interface unless you add authentication and TLS, and make sure you know how to stop, disable, and remove the systemd services before enabling them.
SKILL.md:28Unverified Remote Installation Script Executed Directly by Shell
SKILL.md:52Boot-Persistent, Automatically Restarting Services Installed with Elevated Administration
SKILL.md:31Unpinned Third-Party Python Package Installed from a Mutable Package Source
SKILL.md:112Unauthenticated Plain-HTTP Service Is Exposed to the Network
The skill recommends piping a remote install script directly into sh, which executes unaudited code fetched at runtime with no integrity verification or review step. If the upstream host, transport, DNS, or script supply chain is compromised, users can execute arbitrary commands on the server immediately, potentially as root depending on the installer.
# Install Ollama on Linux
curl -fsSL https://ollama.ai/install.sh | sh
# Install the Linux AI router
pip install ollama-herd
The dangerous aspect is not chaining by itself but chaining network retrieval directly into shell execution. That removes any chance for review and turns a remote content fetch into immediate code execution, amplifying supply-chain and man-in-the-middle style risks.
# Install Ollama on Linux
curl -fsSL https://ollama.ai/install.sh | sh
# Install the Linux AI router
pip install ollama-herd
Remote code is downloaded and executed. This bypasses code review and could introduce malicious code.
print(chunk.choices[0].delta.content or "", end="")
### curl from any machine
```bash
# Hit your Linux AI server from anywhere on the network
Tool calls are chained to bypass individual safety checks or escalate capabilities beyond what any single tool call would allow.
sudo ufw allow 11435/tcp
sudo firewall-cmd --add-port=11435/tcp --permanent && sudo firewall-cmd --reload
## Linux AI server monitoring
Remote code is downloaded and executed. This bypasses code review and could introduce malicious code.
curl -s http://localhost:11435/fleet/status | python3 -m json.tool
# Linux AI server health — 15 automated checks
curl -s http://localhost:11435/dashboard/api/health | python3 -m json.tool
# Linux AI server traces — recent requests
curl -s "http://localhost:11435/dashboard/api/traces?limit=10" | python3 -m json.tool
Remote code is downloaded and executed. This bypasses code review and could introduce malicious code.
curl -s http://localhost:11435/dashboard/api/health | python3 -m json.tool
# Linux AI server traces — recent requests
curl -s "http://localhost:11435/dashboard/api/traces?limit=10" | python3 -m json.tool
# Linux AI server logs
journalctl -u herd-router -f
Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.
```bash
sudo systemctl enable --now herd-router # on the Linux AI router
sudo systemctl enable --now herd-node # on all Linux AI nodes
Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.
```bash
sudo systemctl enable --now herd-router # on the Linux AI router
sudo systemctl enable --now herd-node # on all Linux AI nodes
Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.
```bash
sudo systemctl enable --now herd-router # on the Linux AI router
sudo systemctl enable --now herd-node # on all Linux AI nodes
Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.
```bash
sudo systemctl enable --now herd-router # on the Linux AI router
sudo systemctl enable --now herd-node # on all Linux AI nodes
Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.
```bash
sudo systemctl enable --now herd-router # on the Linux AI router
sudo systemctl enable --now herd-node # on all Linux AI nodes
Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.
```bash
sudo systemctl enable --now herd-router # on the Linux AI router
sudo systemctl enable --now herd-node # on all Linux AI nodes
Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.
```bash
sudo systemctl enable --now herd-router # on the Linux AI router
sudo systemctl enable --now herd-node # on all Linux AI nodes
Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.
```bash
sudo systemctl enable --now herd-router # on the Linux AI router
sudo systemctl enable --now herd-node # on all Linux AI nodes
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
print(chunk.choices[0].delta.content or "", end="")
### curl from any machine
```bash
# Hit your Linux AI server from anywhere on the network
The skill explicitly instructs opening TCP/11435 and states the dashboard/API can be accessed from anywhere on the network, but it provides no authentication, TLS, network scoping, or privacy warning. That can expose prompts, traces, model access, and administrative visibility to any reachable host on the LAN or broader network if port forwarding or permissive firewall rules are present.
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
curl http://localhost:11435/api/generate-image \
-d '{"model": "z-image-turbo", "prompt": "server rack visualization", "width": 1024, "height": 1024}'