hf-cli

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). I flagged the install-script URLs because the SKILL.md includes curl | bash/sh commands that fetch and execute remote code at install/runtime: https://hf.co/cli/install.sh and https://raw.githubusercontent.com/huggingface/hf-mount/main/install.sh

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.90). The skill explicitly instructs running remote install scripts via curl | bash (and curl | sh) and includes commands to mount remote buckets locally and install skills globally, all of which modify the host system and can require elevated privileges or compromise system state.