train-sentence-transformers

Pass

Audited by Gen Agent Trust Hub on Aug 26, 2026

Risk Level: SAFE
Full Analysis
  • Official Package Installation: The skill provides instructions for installing machine learning libraries such as sentence-transformers, peft, and trackio from standard, well-known package registries.
  • Trusted Remote Script: The skill references an installation command for the Hugging Face CLI that fetches a script from the vendor's official domain (hf.co) and executes it. This is a standard and accepted method for tool installation from this vendor.
  • Secure Secret Management: The documentation follows security best practices by instructing users to manage sensitive credentials like HF_TOKEN and WANDB_API_KEY through environment variables or platform-specific secrets rather than hardcoding them in scripts.
  • Standard ML Workflow: The provided Python templates utilize established libraries (PyTorch, Hugging Face Transformers) for model training, evaluation, and logging. The network operations are limited to intended functionalities such as downloading datasets and pushing trained models to the Hugging Face Hub.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 26, 2026, 01:02 AM
Security Audit — agent-trust-hub — train-sentence-transformers