hugging-face-dataset-creator
Pass
Audited by Gen Agent Trust Hub on Mar 28, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill includes a Python script (
dataset_manager.py) to handle dataset operations. Analysis of the script shows it uses standard Python libraries and the officialhuggingface_hubAPI to interact with the Hugging Face Hub. It does not perform unsafe shell executions or demonstrate command injection vulnerabilities. - [EXTERNAL_DOWNLOADS]: The skill utilizes the
huggingface_hubPython package. This is a well-known, industry-standard library provided by Hugging Face for interacting with their platform. - [DATA_EXFILTRATION]: Network activity is restricted to communication with
huggingface.cofor the purpose of dataset management. This is the primary intended function of the skill. No evidence of unauthorized data collection or exfiltration to suspicious domains was found. - [CREDENTIALS_UNSAFE]: The skill follows security best practices by using the
HF_TOKENenvironment variable for authentication. It does not contain hardcoded secrets, and the documentation instructs users on the proper way to provide credentials via the environment.
Audit Metadata