FEATUREDr/LocalLLaMA· rssEN22:48 · 05·23
→llama.cpp server has built-in native tools: exec_shell, edit_file, and more
llama.cpp server exposes an experimental --tools flag with 8 native tools, including file reads, grep search, shell execution, file edits, diffs, and datetime; the post says file operations are relative to the server launch directory and no command whitelist or strict sandbox is provided yet.
#Agent#Tools#Code#llama.cpp
why featured
HKR-H/K/R all pass: llama.cpp adding native shell and file tools is a concrete agent-runtime shift with safety stakes. Reddit sourcing and experimental status keep it in the lower featured band.
editor take
llama.cpp adding 8 native tools is useful, but exec_shell without a whitelist or sandbox is a footgun near any real repo.
sharp
llama.cpp just made local agents much easier to boot, and the guardrails are behind the capability. The experimental `--tools` flag exposes 8 tools: `read_file`, `grep_search`, `exec_shell_command`, `write_file`, `edit_file`, `apply_diff`, and others. File operations run relative to the server launch directory, so a plain `.gguf` plus the llama.cpp binary now gets close to a tiny coding agent harness.
The dangerous part is not tool calling; it is native shell and file mutation inside the inference server. The post says there is no command whitelist and no strict sandbox yet. Claude Code and OpenAI Codex at least force approvals, directory scoping, and visible diffs into the workflow. llama.cpp currently smells like agent runtime welded onto a model server. Great for a throwaway repo; reckless near anything with secrets.
HKR breakdown
hook ✓knowledge ✓resonance ✓