hf-cli

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The SKILL.md includes explicit install commands that fetch and execute remote scripts (curl ... | bash/sh) from https://hf.co/cli/install.sh and https://raw.githubusercontent.com/huggingface/hf-mount/main/install.sh, so remote content is run as code during setup.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.80). The skill instructs running remote install scripts (curl | bash / sh) and offers commands like hf skills add --global --dest which install or modify files on the host, so it encourages changing the machine's state and potentially invoking elevated actions.