huggingface-jobs
Pass
Audited by Gen Agent Trust Hub on Mar 23, 2026
Risk Level: SAFE
Full Analysis
- Secret Management and Authentication: The skill enforces best practices for handling Hugging Face authentication tokens. It instructs the agent to use encrypted secrets via the
HF_TOKENenvironment variable rather than hardcoding credentials or using less secure environment configurations. This follows industry standards for credential management in remote execution environments. - Remote Code Execution Context: The skill is designed to execute Python scripts on Hugging Face's managed cloud infrastructure. This functionality is the primary purpose of the skill and is implemented through standardized interfaces like the
hf_jobsMCP tool andhuggingface_hublibrary. The execution of remote scripts is restricted to well-known and trusted sources, such as Hugging Face's official GitHub and Hub repositories. - Data Processing and Safety Boundaries: The included scripts ingest external data from the Hugging Face Hub for tasks like batch inference and dataset analysis. To mitigate the surface for indirect prompt injection, the scripts utilize the
apply_chat_templatemethod from the Transformers library, which is a recognized best practice for separating untrusted user data from model instructions. - Dependency Management: The skill uses PEP 723 inline dependency headers to manage its software environment. The identified dependencies consist of reputable open-source libraries (e.g., PyTorch, Transformers, Polars, vLLM) commonly used for large-scale data and machine learning tasks.
Audit Metadata