ai-infrastructure-huggingface-inference
Pass
Audited by Gen Agent Trust Hub on Apr 7, 2026
Risk Level: SAFEDATA_EXFILTRATIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [DATA_EXFILTRATION]: The skill performs network requests to well-known AI services (Hugging Face and Mistral AI) via official SDK calls to perform inference tasks. It also demonstrates reading from and writing to the local filesystem using the
node:fsmodule for processing media files (audio, images), which is necessary for the multi-modal functionality described. - [EXTERNAL_DOWNLOADS]: The skill uses the standard
@huggingface/inferencepackage from the public NPM registry, which is the official and expected dependency for this infrastructure. - [PROMPT_INJECTION]: The skill ingests untrusted user data for processing by external models, identifying an indirect prompt injection surface. Ingestion points: User messages are passed to the
chatCompletionandtextGenerationmethods via themessagesandinputsparameters. Boundary markers: The skill recommends usingsystemrole messages to define and constrain model behavior. Capability inventory: The skill possesses network access for API calls and filesystem access for media processing. Sanitization: No explicit input validation or escaping is provided in these patterns, as is common for low-level SDK examples.
Audit Metadata