huggingface-hub
Pass
Audited by Gen Agent Trust Hub on Sep 1, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to download an installation script from the official Hugging Face domain (hf.co).
- [REMOTE_CODE_EXECUTION]: Documents a command that pipes a remote shell script from a well-known service provider directly to the bash interpreter for installation purposes.
- [COMMAND_EXECUTION]: Details numerous CLI commands for interacting with external infrastructure, including repository management, file synchronization, and the execution of SQL queries against datasets.
- [INDIRECT_PROMPT_INJECTION]: 1. Ingestion points: The CLI commands for downloading repositories and querying datasets via SQL accept external identifiers and query strings as input (defined in SKILL.md). 2. Boundary markers: No specific delimiters are recommended in the reference guide to separate user-provided inputs from command parameters. 3. Capability inventory: The documented tool has permissions to perform network requests, file system operations, and administrative repository actions. 4. Sanitization: The documentation does not explicitly detail sanitization procedures for user-supplied data processed by the tool.
Audit Metadata