huggingface-spaces

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.80). Multiple direct .whl download URLs point to GitHub Releases hosted by small/unknown accounts (adithyaxx, LDYang694) which are high‑risk sources for binary wheels and a common malware-distribution vector.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). At runtime, a ZeroGPU Space built using this skill runs user-facing Gradio handlers (e.g., generate(prompt: str) bound via demo.launch(mcp_server=True) / @app.api) that ingest visitor-authored free text prompts directly into the app’s Python workflow without any prior “select a specific item” step.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill documentation includes explicit runtime install URLs (e.g. the TRELLIS.2 requirements entry https://github.com/adithyaxx/flash-attention/releases/download/v2.8.3/flash_attn-2.8.3+cu13torch2.11cxx11abiTRUE-cp312-cp312-linux_x86_64.whl and git+https://github.com/EasternJournalist/utils3d.git@9a4eb15e4021b67b12c460c7057d642626897ec8) that are intended to be fetched/installed during Space build or startup, which will execute remote code and are presented as required dependencies for working Spaces.