release
Pass
Audited by Gen Agent Trust Hub on Jul 8, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- Script Execution: The skill orchestrates several local shell and Python scripts (
prepare_hf_deployment.sh,manage_hf_collection.py,verify_private_spaces.py) to automate deployment steps. These scripts are used for staging Docker contexts, managing Hub collections, and verifying service health. - External Resource Fetching: During the release process, the skill is configured to pull base Docker images from the Hugging Face container registry (
ghcr.io/huggingface/openenv-base) and reference specific versions of the source code from the official GitHub repository (github.com/huggingface/OpenEnv.git). These operations facilitate reproducible builds and dependency management. - Network Communication: The skill utilizes the Hugging Face CLI (
hf) to interact with the Hugging Face Hub for creating repositories, uploading artifacts, and managing space visibility. It also performs health probes against authenticatedhf.spacedomains to ensure successful deployment. - Runtime Verification: The workflow includes verification steps such as
POST /resetandPOST /stepprobes to confirm the usability of deployed environments. These checks are performed through authenticated channels using local tokens.
Audit Metadata