hf-cli

BENIGN with medium security risk. The skill is largely aligned with Hugging Face CLI usage and mostly routes data to official Hugging Face services, but it includes risky pipe-to-shell installers, transitive skill/extension installation from third-party sources, and broad real-world actions that could upload data or change remote resources if used autonomously.