hugging-face-trackio
Pass
Audited by Gen Agent Trust Hub on Jun 18, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSDATA_EXFILTRATIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill documentation advises installing the 'trackio' library from PyPI using standard tools like pip or uv. This is a legitimate dependency provided by the skill author for experiment tracking.
- [DATA_EXFILTRATION]: The skill transmits training metrics and diagnostic alerts to Hugging Face Spaces and user-configured webhooks. These operations are core features of the monitoring tool and utilize well-known service providers.
- [COMMAND_EXECUTION]: The provided CLI includes a 'query' command that enables agents to perform read-only SQL queries against project databases for data inspection and aggregate analysis.
Audit Metadata