huggingface-papers

The skill facilitates interaction with the Hugging Face Papers platform. It uses 'curl' commands to fetch paper content in markdown format and metadata via JSON API endpoints. While it involves network operations and command execution, all target URLs belong to 'huggingface.co', which is the vendor's official domain. The skill correctly identifies that write operations (claiming authorship, indexing papers, updating links) require an 'Authorization: Bearer $HF_TOKEN', following standard security practices for API interaction. No evidence of prompt injection, data exfiltration to third parties, or obfuscation was found. The use of arXiv IDs for resource targeting is a standard industry practice for research tools.