hugging-face-datasets
Pass
Audited by Gen Agent Trust Hub on Apr 26, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
uvpackage manager to execute local scripts (scripts/dataset_manager.pyandscripts/sql_manager.py). This is a standard method for modular AI agent skills to perform complex logic. - [EXTERNAL_DOWNLOADS]: Interacts with the Hugging Face Hub (
huggingface.co) to retrieve and update dataset content. Dependencies are managed via PEP 723 inline definitions within the provided Python scripts, which are resolved byuvat runtime. - [DATA_EXPOSURE]: Uses the
HF_TOKENenvironment variable for authenticated operations. This follows industry best practices for credential management by avoiding hardcoded secrets and relying on user-provided configuration. - [PROMPT_INJECTION]: Processes external dataset data and local user-supplied JSON files. The skill implements structure through various templates (Chat, QA, Classification) and mentions JSON validation, which serves as a mitigation surface for handling untrusted content from the Hub.
Audit Metadata