hf-upload

Pass

Audited by Gen Agent Trust Hub on Apr 3, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill manages HuggingFace credentials through environment variables and local .env files, which is a standard security practice for secret management. It includes a masking function in hf_config.py to ensure tokens are not fully exposed in validation logs.
  • [SAFE]: Network operations are restricted to HuggingFace's official API and repository domains for the purpose of dataset management, which aligns with the skill's primary function.
  • [SAFE]: The skill relies on the well-known huggingface_hub Python package and does not attempt to download or execute arbitrary code from external sources.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 3, 2026, 06:09 PM