I think this is unlikely but a local model could generate malicious code. You would have to run it manually though.