hugging-face-cli
Pass
Audited by Gen Agent Trust Hub on Jul 2, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill documents the
hf jobs runandhf jobs uv runcommands, which allow for executing arbitrary commands or Python scripts in remote containerized environments (CPU and GPU flavors) on Hugging Face infrastructure. - [EXTERNAL_DOWNLOADS]: Includes commands for downloading models, datasets, and space files from the Hugging Face Hub (
hf download). It also includes the ability to download and execute scripts directly from URLs usinghf jobs uv run <url>, specifically referencing well-known Hugging Face domains. - [COMMAND_EXECUTION]: The skill acts as a CLI wrapper documentation, instructing the agent on how to execute local
hfcommands to interact with remote repositories and manage local caches. - [CREDENTIALS_UNSAFE]: The documentation describes the use of
HF_TOKENfor non-interactive authentication viahf auth login --token $HF_TOKEN. This is presented as a standard practice for environment variable management and does not involve hardcoded secrets. - [PERSISTENCE_MECHANISMS]: Mentions
hf jobs scheduled run, which enables recurring task execution on remote infrastructure. This is a functional feature of the cloud platform rather than a local system persistence attack.
Audit Metadata