huggingface-hub
Pass
Audited by Gen Agent Trust Hub on May 19, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches the CLI installation script from Hugging Face's official domain (hf.co).
- [REMOTE_CODE_EXECUTION]: Executes the official Hugging Face installation script by piping the download directly to bash.
- [COMMAND_EXECUTION]: Provides instructions for various CLI operations, including repository lifecycle management (create, delete, move), file transfers (download, upload, sync), and extension installation.
- [INDIRECT_PROMPT_INJECTION]: The skill documents commands that ingest external data, creating a potential surface for indirect injection:
- Ingestion points: REPO_ID in 'hf download' and 'hf extensions install', SQL queries in 'hf datasets sql', and local file paths.
- Boundary markers: None explicitly defined in the provided command reference.
- Capability inventory: The 'hf' tool can write to the filesystem, install external extensions from GitHub, and execute SQL queries via DuckDB.
- Sanitization: Not specified in the CLI reference documentation.
Audit Metadata