hugging-face-tool-builder
Pass
Audited by Gen Agent Trust Hub on Jun 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to create and test shell, Python, and TypeScript scripts using standard tools like
curl,jq, and the officialhfcommand-line utility. - [EXTERNAL_DOWNLOADS]: Network operations are directed at
huggingface.co, which is a well-known and trusted service for machine learning models and datasets. This includes fetching metadata, repository files, and the OpenAPI specification. - [CREDENTIALS_UNSAFE]: The skill correctly implements security best practices by instructing the use of the
HF_TOKENenvironment variable for API authorization, avoiding hardcoded secrets.
Audit Metadata