skills/huggingface/openenv/release/Gen Agent Trust Hub

release

Pass

Audited by Gen Agent Trust Hub on Jul 8, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • Script Execution: The skill orchestrates several local shell and Python scripts (prepare_hf_deployment.sh, manage_hf_collection.py, verify_private_spaces.py) to automate deployment steps. These scripts are used for staging Docker contexts, managing Hub collections, and verifying service health.
  • External Resource Fetching: During the release process, the skill is configured to pull base Docker images from the Hugging Face container registry (ghcr.io/huggingface/openenv-base) and reference specific versions of the source code from the official GitHub repository (github.com/huggingface/OpenEnv.git). These operations facilitate reproducible builds and dependency management.
  • Network Communication: The skill utilizes the Hugging Face CLI (hf) to interact with the Hugging Face Hub for creating repositories, uploading artifacts, and managing space visibility. It also performs health probes against authenticated hf.space domains to ensure successful deployment.
  • Runtime Verification: The workflow includes verification steps such as POST /reset and POST /step probes to confirm the usability of deployed environments. These checks are performed through authenticated channels using local tokens.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 8, 2026, 04:16 AM
Security Audit — agent-trust-hub — release