hugging-face-jobs
Pass
Audited by Gen Agent Trust Hub on Sep 6, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external data from Hugging Face Hub datasets which may contain untrusted instructions. \n * Ingestion points: Data is loaded via
datasets.load_datasetincot-self-instruct.py,generate-responses.py, andfinepdfs-stats.py. \n * Boundary markers: Scripts useapply_chat_templatefor delimiter formatting, but do not explicitly filter for malicious instructions. \n * Capability inventory: The skill enables remote code execution viahf_jobsand write access to Hub repositories viapush_to_hub. \n * Sanitization: No explicit sanitization or validation of input dataset content is performed. \n- [DYNAMIC_EXECUTION]: The primary purpose of this skill is to generate and execute Python code remotely on managed Hugging Face Jobs infrastructure using thehf_jobstool. \n- [EXTERNAL_DOWNLOADS]: The skill references and downloads scripts from official Hugging Face Hub infrastructure and GitHub repositories. These resources are from a recognized trusted organization.
Audit Metadata