hf-upload
Pass
Audited by Gen Agent Trust Hub on Apr 3, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill manages HuggingFace credentials through environment variables and local
.envfiles, which is a standard security practice for secret management. It includes a masking function inhf_config.pyto ensure tokens are not fully exposed in validation logs. - [SAFE]: Network operations are restricted to HuggingFace's official API and repository domains for the purpose of dataset management, which aligns with the skill's primary function.
- [SAFE]: The skill relies on the well-known
huggingface_hubPython package and does not attempt to download or execute arbitrary code from external sources.
Audit Metadata