llm-toolbox
Public
SECURITY.md
SECURITY.md
LLM Toolbox is meant to help a local model without giving it a full login to the machine.
fetch_url / web_search allow only http(s) and block credentials, localhost, private IPs, and cloud-metadata hosts. Redirects are re-checked (max 3).ssh, Keychains, Mail, Messages, or similar locations_screenshots folder. Mail / Messages / password apps require an extra setting~/.llm-toolbox is created 0700; JSON files are written 0600Tool families can be disabled per chat. An optional OpenAlex contact email is a protected global field and is not used as the user's identity.
Memory, todos, and accuracy corrections live in ~/.llm-toolbox/ on the user's machine. That directory is not part of the plugin package.
Use the Hub page for this plugin. Do not paste secrets into public reports.
LLM Toolbox is meant to help a local model without giving it a full login to the machine.
fetch_url / web_search allow only http(s) and block credentials, localhost, private IPs, and cloud-metadata hosts. Redirects are re-checked (max 3).ssh, Keychains, Mail, Messages, or similar locations_screenshots folder. Mail / Messages / password apps require an extra setting~/.llm-toolbox is created 0700; JSON files are written 0600Tool families can be disabled per chat. An optional OpenAlex contact email is a protected global field and is not used as the user's identity.
Memory, todos, and accuracy corrections live in ~/.llm-toolbox/ on the user's machine. That directory is not part of the plugin package.
Use the Hub page for this plugin. Do not paste secrets into public reports.