huggingface-tool-builder
Pass
Audited by Gen Agent Trust Hub on Sep 6, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides baseline and reference scripts for interacting with Hugging Face's official API and CLI tools. All network operations are directed at official
huggingface.codomains. Authentication is handled correctly through theHF_TOKENenvironment variable, avoiding hardcoded secrets. The shell and Python scripts include input validation (e.g., checking if limits are numeric) and use standard utilities likecurlandjqfor data processing. References to external tools like thehfCLI are for official Hugging Face utilities. No malicious patterns such as obfuscation, persistence, or data exfiltration were detected.
Audit Metadata