hf-cli

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The SKILL.md includes install commands that fetch-and-execute remote shell scripts (curl -LsSf https://hf.co/cli/install.sh | bash -s and curl -fsSL https://raw.githubusercontent.com/huggingface/hf-mount/main/install.sh | sh), which execute remote code during setup and are presented as required installation steps for the skill.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.90). The prompt includes direct install commands (curl | bash, hf-mount install) and instructs running hf skills add/regenerate which download and install software or write to local paths — actions that modify the host filesystem and may require elevated privileges, so it encourages changing the machine state.