huggingface-papers
Pass
Audited by Gen Agent Trust Hub on Aug 10, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes standard
curlcommands to interact with the Hugging Face REST API. These commands are used for automated tasks such as fetching paper content, searching repositories, and updating paper metadata. - [EXTERNAL_DOWNLOADS]: Fetches paper content in markdown format and structured JSON metadata from
huggingface.co. It also provides fallback URLs toarxiv.org. Both domains are well-known technology and research services. - [CREDENTIALS_UNSAFE]: Employs the
$HF_TOKENenvironment variable for Bearer authentication in API requests. This is a standard and secure method for managing API secrets, avoiding the risk of hardcoded credentials.
Audit Metadata