hugging-face-cli

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The Hugging Face CLI skill allows managing repositories, datasets, models, and discussions where an outsider can submit pull requests or discussions that the agent may inspect via hf discussions list or hf discussions info, exposing the agent to outsider-authored free text.