train-sentence-transformers
Pass
Audited by Gen Agent Trust Hub on Aug 26, 2026
Risk Level: SAFE
Full Analysis
- Official Package Installation: The skill provides instructions for installing machine learning libraries such as
sentence-transformers,peft, andtrackiofrom standard, well-known package registries. - Trusted Remote Script: The skill references an installation command for the Hugging Face CLI that fetches a script from the vendor's official domain (
hf.co) and executes it. This is a standard and accepted method for tool installation from this vendor. - Secure Secret Management: The documentation follows security best practices by instructing users to manage sensitive credentials like
HF_TOKENandWANDB_API_KEYthrough environment variables or platform-specific secrets rather than hardcoding them in scripts. - Standard ML Workflow: The provided Python templates utilize established libraries (PyTorch, Hugging Face Transformers) for model training, evaluation, and logging. The network operations are limited to intended functionalities such as downloading datasets and pushing trained models to the Hugging Face Hub.
Audit Metadata