huggingface-paper-publisher
Pass
Audited by Gen Agent Trust Hub on Aug 18, 2026
Risk Level: SAFE
Full Analysis
- [External Content Sanitization]: The skill processes metadata retrieved from external sources such as arXiv. It includes a dedicated
_sanitize_textmethod in thepaper_manager.pyscript that neutralizes control characters, prevents markdown code fence breakout, and escapes YAML document delimiters. This measure ensures that untrusted content from research papers does not disrupt the repository's configuration or documentation structure. - [Credential Management]: Authentication for repository operations is handled using the
HF_TOKENenvironment variable. The skill is designed to load this token via thepython-dotenvpackage, which is a standard and recommended practice for managing sensitive API tokens in a development environment without hardcoding them in the source code. - [Integration with Trusted Services]: The tool interacts with well-known and trusted technology platforms, specifically Hugging Face and arXiv. It utilizes the official
huggingface_hubPython client and standard API calls to these services, ensuring that data transfers and repository modifications are conducted through established, legitimate channels.
Audit Metadata