transformers
Pass
Audited by Gen Agent Trust Hub on Aug 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The documentation provides standard installation commands using the
uvpackage manager fortransformers,huggingface_hub,datasets,evaluate, and other domain-specific libraries liketimmandlibrosa.- [REMOTE_CODE_EXECUTION]: The skill documents thetrust_remote_codeparameter, which is a feature of the library that allows execution of custom logic from model repositories. Importantly, the skill includes a safety warning advising users to only use this feature when they have reviewed the source code from the repository.- [CREDENTIALS_SAFE]: The skill includes comprehensive guidance on managing Hugging Face authentication tokens. It advises against hardcoding secrets, suggests using thehf auth loginCLI for secure storage, and recommends using environment variables via secret managers for CI/CD environments.
Audit Metadata