hf-mcp

SUSPICIOUS overall due to remote job execution, secret forwarding to remote runtimes, and third-party Space data flows, but not malicious. The skill is broadly aligned with its Hugging Face MCP purpose and uses official first-party infrastructure for core access; the main risks come from community Spaces, unpinned job dependencies, and scheduled compute actions rather than deceptive behavior.