hugging-face-cli

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The required runtime workflow here is Hugging Face CLI commands (e.g., hf download, hf models ls/info, hf datasets ls/info, hf spaces ls/info) which ingest and display Hugging Face Hub repository metadata and file contents only when the user specifies particular repo IDs/files/filters.