huggingface-papers

Pass

Audited by Gen Agent Trust Hub on Aug 10, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes standard curl commands to interact with the Hugging Face REST API. These commands are used for automated tasks such as fetching paper content, searching repositories, and updating paper metadata.
  • [EXTERNAL_DOWNLOADS]: Fetches paper content in markdown format and structured JSON metadata from huggingface.co. It also provides fallback URLs to arxiv.org. Both domains are well-known technology and research services.
  • [CREDENTIALS_UNSAFE]: Employs the $HF_TOKEN environment variable for Bearer authentication in API requests. This is a standard and secure method for managing API secrets, avoiding the risk of hardcoded credentials.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 10, 2026, 01:28 PM
Security Audit — agent-trust-hub — huggingface-papers