{"data":{"skill":{"slug":"sickn33-hugging-face-jobs","name":"hugging-face-jobs","icon":"📦","repo":"https://github.com/sickn33/antigravity-awesome-skills/tree/main/skills/hugging-face-jobs","status":"approved","author":"sickn33","authorVersion":null,"skillstoreRevision":2},"audit":{"id":"2c3b9e0c-6e51-4e92-b349-0944fe90ff71","skill_id":"969f73fa-9eae-4564-b581-29fdf5e68435","version":5,"content_hash":"v3:88a8e9a07f4c54ab105c1c41b6267c287146b07b:0541e209f66da587fb0308d596662f6e146eb3e27badf73836f9c363a8f59aa7:cf7d49ef3a70ed90cad79f57aa4ebe7673ac3c136a48fa1aa17610165b4004b1:736b696c6c732f7369636b6e33332f68756767696e672d666163652d6a6f6273:00b96b3e016921dd0af2cd05839d2331","risk_level":"high","is_blocked":false,"safe_to_publish":false,"analysis_status":"ok","agent_auto_install_policy":"confirmation_required","manual_install_policy":"allowed","summary":"Most static findings are detector noise from Markdown, documentation URLs, safe environment access, and ordinary API examples. Confirmed risks involve exposed tokens and mutable remote code; semantic review also found unpinned images and missing approval gates for paid jobs.","remediation":[{"issue":"Mutable remote scripts are executed without integrity controls.","severity":"high","suggestion":"Pin every remote script to an immutable commit and verify its digest before submission. Prefer the bundled reviewed script content."},{"issue":"Mutable container images can run while HF_TOKEN is available.","severity":"high","suggestion":"Pin container images by digest and review the image provenance. Never pass credentials to an unpinned image."},{"issue":"Token command substitution and command-line options can expose credentials.","severity":"high","suggestion":"Remove hf-token arguments and shell substitution examples. Use the platform secret option or an authenticated credential store."},{"issue":"Paid and recurring jobs can be created without final user confirmation.","severity":"medium","suggestion":"Show hardware, timeout, destination, schedule, and estimated cost. Require explicit approval immediately before every submission or schedule creation."}],"risk_factor_evidence":[{"factor":"network","evidence":[{"file":"references/hub_saving.md","line_end":65,"line_start":65},{"file":"references/hub_saving.md","line_end":65,"line_start":65},{"file":"references/token_usage.md","line_end":243,"line_start":243},{"file":"references/token_usage.md","line_end":268,"line_start":268},{"file":"references/troubleshooting.md","line_end":11,"line_start":11},{"file":"references/troubleshooting.md","line_end":36,"line_start":36},{"file":"references/troubleshooting.md","line_end":190,"line_start":190},{"file":"scripts/cot-self-instruct.py","line_end":45,"line_start":45},{"file":"scripts/cot-self-instruct.py","line_end":407,"line_start":407},{"file":"scripts/cot-self-instruct.py","line_end":408,"line_start":408},{"file":"scripts/cot-self-instruct.py","line_end":427,"line_start":427},{"file":"scripts/cot-self-instruct.py","line_end":431,"line_start":431},{"file":"scripts/cot-self-instruct.py","line_end":700,"line_start":700},{"file":"scripts/cot-self-instruct.py","line_end":708,"line_start":708},{"file":"scripts/finepdfs-stats.py","line_end":34,"line_start":34},{"file":"scripts/finepdfs-stats.py","line_end":276,"line_start":276},{"file":"scripts/finepdfs-stats.py","line_end":282,"line_start":282},{"file":"scripts/finepdfs-stats.py","line_end":283,"line_start":283},{"file":"scripts/finepdfs-stats.py","line_end":527,"line_start":527},{"file":"scripts/finepdfs-stats.py","line_end":554,"line_start":554},{"file":"scripts/generate-responses.py","line_end":119,"line_start":119},{"file":"scripts/generate-responses.py","line_end":123,"line_start":123},{"file":"scripts/generate-responses.py","line_end":125,"line_start":125},{"file":"scripts/generate-responses.py","line_end":150,"line_start":150},{"file":"scripts/generate-responses.py","line_end":155,"line_start":155},{"file":"scripts/generate-responses.py","line_end":410,"line_start":410},{"file":"scripts/generate-responses.py","line_end":580,"line_start":580},{"file":"SKILL.md","line_end":538,"line_start":538},{"file":"SKILL.md","line_end":2,"line_start":2},{"file":"SKILL.md","line_end":54,"line_start":54},{"file":"SKILL.md","line_end":217,"line_start":217},{"file":"SKILL.md","line_end":373,"line_start":373},{"file":"SKILL.md","line_end":376,"line_start":376},{"file":"SKILL.md","line_end":473,"line_start":473},{"file":"SKILL.md","line_end":538,"line_start":538},{"file":"SKILL.md","line_end":702,"line_start":702},{"file":"SKILL.md","line_end":857,"line_start":857},{"file":"SKILL.md","line_end":1009,"line_start":1009},{"file":"SKILL.md","line_end":1010,"line_start":1010},{"file":"SKILL.md","line_end":1011,"line_start":1011},{"file":"SKILL.md","line_end":1012,"line_start":1012},{"file":"SKILL.md","line_end":1015,"line_start":1015},{"file":"SKILL.md","line_end":1016,"line_start":1016},{"file":"SKILL.md","line_end":1017,"line_start":1017},{"file":"SKILL.md","line_end":1018,"line_start":1018}]},{"factor":"filesystem","evidence":[{"file":"references/hub_saving.md","line_end":184,"line_start":184},{"file":"SKILL.md","line_end":373,"line_start":373}]},{"factor":"env_access","evidence":[{"file":"references/hub_saving.md","line_end":22,"line_start":22},{"file":"references/hub_saving.md","line_end":28,"line_start":28},{"file":"references/hub_saving.md","line_end":34,"line_start":34},{"file":"references/hub_saving.md","line_end":85,"line_start":85},{"file":"references/hub_saving.md","line_end":96,"line_start":96},{"file":"references/hub_saving.md","line_end":115,"line_start":115},{"file":"references/hub_saving.md","line_end":144,"line_start":144},{"file":"references/hub_saving.md","line_end":177,"line_start":177},{"file":"references/hub_saving.md","line_end":233,"line_start":233},{"file":"references/token_usage.md","line_end":132,"line_start":132},{"file":"references/token_usage.md","line_end":145,"line_start":145},{"file":"references/token_usage.md","line_end":184,"line_start":184},{"file":"references/token_usage.md","line_end":219,"line_start":219},{"file":"references/token_usage.md","line_end":222,"line_start":222},{"file":"references/token_usage.md","line_end":261,"line_start":261},{"file":"references/token_usage.md","line_end":375,"line_start":375},{"file":"references/token_usage.md","line_end":455,"line_start":455},{"file":"references/token_usage.md","line_end":484,"line_start":484},{"file":"references/token_usage.md","line_end":510,"line_start":510},{"file":"references/token_usage.md","line_end":534,"line_start":534},{"file":"references/token_usage.md","line_end":552,"line_start":552},{"file":"references/token_usage.md","line_end":558,"line_start":558},{"file":"references/troubleshooting.md","line_end":29,"line_start":29},{"file":"references/troubleshooting.md","line_end":210,"line_start":210},{"file":"references/troubleshooting.md","line_end":372,"line_start":372},{"file":"references/troubleshooting.md","line_end":448,"line_start":448},{"file":"scripts/cot-self-instruct.py","line_end":70,"line_start":70},{"file":"scripts/cot-self-instruct.py","line_end":572,"line_start":572},{"file":"scripts/finepdfs-stats.py","line_end":360,"line_start":360},{"file":"scripts/finepdfs-stats.py","line_end":483,"line_start":483},{"file":"scripts/generate-responses.py","line_end":56,"line_start":56},{"file":"scripts/generate-responses.py","line_end":228,"line_start":228},{"file":"SKILL.md","line_end":176,"line_start":176},{"file":"SKILL.md","line_end":187,"line_start":187},{"file":"SKILL.md","line_end":202,"line_start":202},{"file":"SKILL.md","line_end":203,"line_start":203},{"file":"SKILL.md","line_end":222,"line_start":222},{"file":"SKILL.md","line_end":253,"line_start":253},{"file":"SKILL.md","line_end":256,"line_start":256},{"file":"SKILL.md","line_end":261,"line_start":261},{"file":"SKILL.md","line_end":510,"line_start":510},{"file":"SKILL.md","line_end":513,"line_start":513},{"file":"SKILL.md","line_end":520,"line_start":520},{"file":"SKILL.md","line_end":559,"line_start":559},{"file":"SKILL.md","line_end":833,"line_start":833},{"file":"SKILL.md","line_end":853,"line_start":853},{"file":"SKILL.md","line_end":960,"line_start":960}]},{"factor":"external_commands","evidence":[{"file":"scripts/cot-self-instruct.py","line_end":437,"line_start":430},{"file":"scripts/cot-self-instruct.py","line_end":44,"line_start":44},{"file":"scripts/cot-self-instruct.py","line_end":707,"line_start":707},{"file":"scripts/finepdfs-stats.py","line_end":242,"line_start":240},{"file":"scripts/finepdfs-stats.py","line_end":270,"line_start":242},{"file":"scripts/finepdfs-stats.py","line_end":271,"line_start":270},{"file":"scripts/finepdfs-stats.py","line_end":275,"line_start":271},{"file":"scripts/finepdfs-stats.py","line_end":278,"line_start":275},{"file":"scripts/generate-responses.py","line_end":124,"line_start":124},{"file":"scripts/generate-responses.py","line_end":146,"line_start":146},{"file":"scripts/generate-responses.py","line_end":164,"line_start":154},{"file":"SKILL.md","line_end":19,"line_start":19},{"file":"SKILL.md","line_end":24,"line_start":24},{"file":"SKILL.md","line_end":41,"line_start":41},{"file":"SKILL.md","line_end":43,"line_start":43},{"file":"SKILL.md","line_end":55,"line_start":55},{"file":"SKILL.md","line_end":75,"line_start":68},{"file":"SKILL.md","line_end":77,"line_start":75},{"file":"SKILL.md","line_end":77,"line_start":77},{"file":"SKILL.md","line_end":111,"line_start":86},{"file":"SKILL.md","line_end":116,"line_start":111},{"file":"SKILL.md","line_end":119,"line_start":116},{"file":"SKILL.md","line_end":120,"line_start":119},{"file":"SKILL.md","line_end":132,"line_start":120},{"file":"SKILL.md","line_end":137,"line_start":132},{"file":"SKILL.md","line_end":151,"line_start":137},{"file":"SKILL.md","line_end":156,"line_start":151},{"file":"SKILL.md","line_end":159,"line_start":156},{"file":"SKILL.md","line_end":160,"line_start":159},{"file":"SKILL.md","line_end":161,"line_start":160},{"file":"SKILL.md","line_end":167,"line_start":161},{"file":"SKILL.md","line_end":183,"line_start":167},{"file":"SKILL.md","line_end":187,"line_start":183},{"file":"SKILL.md","line_end":188,"line_start":187},{"file":"SKILL.md","line_end":194,"line_start":188},{"file":"SKILL.md","line_end":197,"line_start":194},{"file":"SKILL.md","line_end":200,"line_start":197},{"file":"SKILL.md","line_end":205,"line_start":200},{"file":"SKILL.md","line_end":211,"line_start":205},{"file":"SKILL.md","line_end":212,"line_start":211},{"file":"SKILL.md","line_end":220,"line_start":212},{"file":"SKILL.md","line_end":221,"line_start":220},{"file":"SKILL.md","line_end":221,"line_start":221},{"file":"SKILL.md","line_end":231,"line_start":222},{"file":"SKILL.md","line_end":240,"line_start":231},{"file":"SKILL.md","line_end":269,"line_start":240},{"file":"SKILL.md","line_end":278,"line_start":269},{"file":"SKILL.md","line_end":296,"line_start":278},{"file":"SKILL.md","line_end":299,"line_start":296},{"file":"SKILL.md","line_end":301,"line_start":299}]},{"factor":"scripts","evidence":[{"file":"SKILL.md","line_end":799,"line_start":793}]}],"critical_findings":[],"high_findings":[{"title":"Hardcoded URL","locations":[{"file":"references/troubleshooting.md","line_end":190,"line_start":190}],"confidence":0.94,"description":"hf_jobs(\"uv\", {\"script\": \"https://huggingface.co/user/repo/resolve/main/script.py\"})","review_kind":"capability","source_category":"network","source_severity":"low","confidence_reasoning":"The example executes a remote script from a mutable main branch without a commit pin or integrity check. Upstream changes could run arbitrary code inside a credentialed job."},{"title":"Shell command substitution","locations":[{"file":"scripts/cot-self-instruct.py","line_end":44,"line_start":44}],"confidence":0.97,"description":"-e HF_TOKEN=$(python3 -c \"from huggingface_hub import get_token; print(get_token())\") \\\\","review_kind":"capability","source_category":"external_commands","source_severity":"medium","confidence_reasoning":"The example expands the local HF token into a command-line environment argument. The token can be exposed through process listings, shell tracing, or copied command output."},{"title":"Shell command substitution","locations":[{"file":"scripts/cot-self-instruct.py","line_end":707,"line_start":707}],"confidence":0.97,"description":"-e HF_TOKEN=$(python3 -c \"from huggingface_hub import get_token; print(get_token())\") \\\\","review_kind":"capability","source_category":"external_commands","source_severity":"medium","confidence_reasoning":"The example expands the local HF token into a command-line environment argument. The token can be exposed through process listings, shell tracing, or copied command output."},{"title":"Hardcoded URL","locations":[{"file":"scripts/cot-self-instruct.py","line_end":45,"line_start":45}],"confidence":0.94,"description":"https://huggingface.co/datasets/uv-scripts/synthetic-data/raw/main/cot-self-instruct.py \\\\","review_kind":"capability","source_category":"network","source_severity":"low","confidence_reasoning":"The example executes a remote script from a mutable main branch without a commit pin or integrity check. Upstream changes could run arbitrary code inside a credentialed job."},{"title":"Hardcoded URL","locations":[{"file":"scripts/cot-self-instruct.py","line_end":431,"line_start":431}],"confidence":0.94,"description":"uv run https://huggingface.co/datasets/uv-scripts/synthetic-data/raw/main/cot-self-instruct.py \\\\","review_kind":"capability","source_category":"network","source_severity":"low","confidence_reasoning":"The example executes a remote script from a mutable main branch without a commit pin or integrity check. Upstream changes could run arbitrary code inside a credentialed job."},{"title":"Hardcoded URL","locations":[{"file":"scripts/cot-self-instruct.py","line_end":708,"line_start":708}],"confidence":0.94,"description":"https://huggingface.co/datasets/uv-scripts/synthetic-data/raw/main/cot-self-instruct.py \\\\","review_kind":"capability","source_category":"network","source_severity":"low","confidence_reasoning":"The example executes a remote script from a mutable main branch without a commit pin or integrity check. Upstream changes could run arbitrary code inside a credentialed job."},{"title":"Hardcoded URL","locations":[{"file":"scripts/finepdfs-stats.py","line_end":34,"line_start":34}],"confidence":0.94,"description":"https://huggingface.co/datasets/uv-scripts/dataset-stats/raw/main/finepdfs-stats.py \\\\","review_kind":"capability","source_category":"network","source_severity":"low","confidence_reasoning":"The example executes a remote script from a mutable main branch without a commit pin or integrity check. Upstream changes could run arbitrary code inside a credentialed job."},{"title":"Hardcoded URL","locations":[{"file":"scripts/finepdfs-stats.py","line_end":276,"line_start":276}],"confidence":0.94,"description":"uv run https://huggingface.co/datasets/uv-scripts/dataset-stats/raw/main/finepdfs-stats.py \\\\","review_kind":"capability","source_category":"network","source_severity":"low","confidence_reasoning":"The example executes a remote script from a mutable main branch without a commit pin or integrity check. Upstream changes could run arbitrary code inside a credentialed job."},{"title":"Hardcoded URL","locations":[{"file":"scripts/finepdfs-stats.py","line_end":554,"line_start":554}],"confidence":0.94,"description":"\"    https://huggingface.co/datasets/uv-scripts/dataset-stats/raw/main/finepdfs-stats.py \\\\\"","review_kind":"capability","source_category":"network","source_severity":"low","confidence_reasoning":"The example executes a remote script from a mutable main branch without a commit pin or integrity check. Upstream changes could run arbitrary code inside a credentialed job."},{"title":"Hardcoded URL","locations":[{"file":"scripts/generate-responses.py","line_end":155,"line_start":155}],"confidence":0.94,"description":"uv run https://huggingface.co/datasets/uv-scripts/vllm/raw/main/generate-responses.py \\\\","review_kind":"capability","source_category":"network","source_severity":"low","confidence_reasoning":"The example executes a remote script from a mutable main branch without a commit pin or integrity check. Upstream changes could run arbitrary code inside a credentialed job."},{"title":"Hardcoded URL","locations":[{"file":"scripts/generate-responses.py","line_end":580,"line_start":580}],"confidence":0.94,"description":"https://huggingface.co/datasets/uv-scripts/vllm/raw/main/generate-responses.py \\\\","review_kind":"capability","source_category":"network","source_severity":"low","confidence_reasoning":"The example executes a remote script from a mutable main branch without a commit pin or integrity check. Upstream changes could run arbitrary code inside a credentialed job."},{"title":"Hardcoded URL","locations":[{"file":"SKILL.md","line_end":373,"line_start":373}],"confidence":0.94,"description":"hf_jobs(\"uv\", {\"script\": \"https://huggingface.co/datasets/uv-scripts/.../raw/main/foo.py\"})","review_kind":"capability","source_category":"network","source_severity":"low","confidence_reasoning":"The example executes a remote script from a mutable main branch without a commit pin or integrity check. Upstream changes could run arbitrary code inside a credentialed job."},{"title":"Hardcoded URL","locations":[{"file":"SKILL.md","line_end":376,"line_start":376}],"confidence":0.94,"description":"hf_jobs(\"uv\", {\"script\": \"https://raw.githubusercontent.com/huggingface/trl/main/trl/scripts/sft.py\"","review_kind":"capability","source_category":"network","source_severity":"low","confidence_reasoning":"The example executes a remote script from a mutable main branch without a commit pin or integrity check. Upstream changes could run arbitrary code inside a credentialed job."},{"title":"Unpinned Container Images Receive Credentials","locations":[{"file":"SKILL.md","line_end":321,"line_start":315},{"file":"scripts/cot-self-instruct.py","line_end":45,"line_start":41}],"confidence":0.94,"description":"Examples run mutable latest or implicit-latest container images. One command passes HF_TOKEN into that image, allowing a compromised future image to capture the credential.","review_kind":"security","source_category":"semantic","source_severity":"high","confidence_reasoning":"The image references are visibly unpinned, and the script example places HF_TOKEN in the same container invocation."}],"medium_findings":[{"title":"Paid Job Submission Has No Confirmation Gate","locations":[{"file":"SKILL.md","line_end":45,"line_start":41},{"file":"SKILL.md","line_end":640,"line_start":617},{"file":"SKILL.md","line_end":748,"line_start":724}],"confidence":0.95,"description":"The skill directs the agent to submit paid jobs before reporting cost details and also supports recurring schedules. It does not require final user approval before creating either workload.","review_kind":"security","source_category":"semantic","source_severity":"medium","confidence_reasoning":"The directive explicitly submits first and reports details afterward, while the documented examples show nonzero costs and recurring jobs."},{"title":"Secrets Accepted Through Command-Line Arguments","locations":[{"file":"scripts/cot-self-instruct.py","line_end":551,"line_start":547},{"file":"scripts/generate-responses.py","line_end":530,"line_start":527},{"file":"scripts/finepdfs-stats.py","line_end":348,"line_start":345}],"confidence":0.96,"description":"All bundled scripts accept Hugging Face tokens as command-line values. Tokens supplied this way can remain in shell history or appear in process listings.","review_kind":"security","source_category":"semantic","source_severity":"medium","confidence_reasoning":"Each parser explicitly defines an hf-token option, a well-known credential exposure channel when users supply the value on a command line."}],"low_findings":[],"dangerous_patterns":[],"files_scanned":9,"total_lines":4871,"audit_model":"codex","audited_at":"2026-07-24T00:31:59.192+00:00","created_at":"2026-07-26T14:25:41.416929+00:00","static_findings":[{"id":"blocker:index.html:44:system-reconnaissance","file":"index.html","pattern":"System reconnaissance","snippet":"border-bottom: 2px solid #ffd21e;","category":"blocker","line_end":44,"severity":"low","line_start":44},{"id":"blocker:index.html:56:system-reconnaissance","file":"index.html","pattern":"System reconnaissance","snippet":"border-left: 4px solid #ffd21e;","category":"blocker","line_end":56,"severity":"low","line_start":56},{"id":"blocker:index.html:71:system-reconnaissance","file":"index.html","pattern":"System reconnaissance","snippet":"border-left: 3px solid #ffd21e;","category":"blocker","line_end":71,"severity":"low","line_start":71},{"id":"network:references/hub_saving.md:65:python-http-libraries","file":"references/hub_saving.md","pattern":"Python HTTP libraries","snippet":"requests.post(\"https://your-api.com/results\", json=results)","category":"network","line_end":65,"severity":"low","line_start":65},{"id":"network:references/hub_saving.md:65:hardcoded-url","file":"references/hub_saving.md","pattern":"Hardcoded URL","snippet":"requests.post(\"https://your-api.com/results\", json=results)","category":"network","line_end":65,"severity":"low","line_start":65},{"id":"filesystem:references/hub_saving.md:184:python-file-write-append","file":"references/hub_saving.md","pattern":"Python file write/append","snippet":"with open(\"results.json\", \"w\") as f:","category":"filesystem","line_end":184,"severity":"medium","line_start":184},{"id":"env_access:references/hub_saving.md:22:python-environment-access","file":"references/hub_saving.md","pattern":"Python environment access","snippet":"model.push_to_hub(\"username/model-name\", token=os.environ.get(\"HF_TOKEN\"))","category":"env_access","line_end":22,"severity":"low","line_start":22},{"id":"env_access:references/hub_saving.md:28:python-environment-access","file":"references/hub_saving.md","pattern":"Python environment access","snippet":"dataset.push_to_hub(\"username/dataset-name\", token=os.environ.get(\"HF_TOKEN\"))","category":"env_access","line_end":28,"severity":"low","line_start":28},{"id":"env_access:references/hub_saving.md:34:python-environment-access","file":"references/hub_saving.md","pattern":"Python environment access","snippet":"api = HfApi(token=os.environ.get(\"HF_TOKEN\"))","category":"env_access","line_end":34,"severity":"low","line_start":34},{"id":"env_access:references/hub_saving.md:85:python-environment-access","file":"references/hub_saving.md","pattern":"Python environment access","snippet":"assert \"HF_TOKEN\" in os.environ, \"HF_TOKEN required for Hub operations!\"","category":"env_access","line_end":85,"severity":"low","line_start":85},{"id":"env_access:references/hub_saving.md:96:python-environment-access","file":"references/hub_saving.md","pattern":"Python environment access","snippet":"api = HfApi(token=os.environ.get(\"HF_TOKEN\"))","category":"env_access","line_end":96,"severity":"low","line_start":96},{"id":"env_access:references/hub_saving.md:115:python-environment-access","file":"references/hub_saving.md","pattern":"Python environment access","snippet":"assert \"HF_TOKEN\" in os.environ, \"HF_TOKEN required!\"","category":"env_access","line_end":115,"severity":"low","line_start":115},{"id":"env_access:references/hub_saving.md:144:python-environment-access","file":"references/hub_saving.md","pattern":"Python environment access","snippet":"assert \"HF_TOKEN\" in os.environ, \"HF_TOKEN required!\"","category":"env_access","line_end":144,"severity":"low","line_start":144},{"id":"env_access:references/hub_saving.md:177:python-environment-access","file":"references/hub_saving.md","pattern":"Python environment access","snippet":"assert \"HF_TOKEN\" in os.environ, \"HF_TOKEN required!\"","category":"env_access","line_end":177,"severity":"low","line_start":177},{"id":"env_access:references/hub_saving.md:233:python-environment-access","file":"references/hub_saving.md","pattern":"Python environment access","snippet":"- [ ] Script checks for token: `assert \"HF_TOKEN\" in os.environ`","category":"env_access","line_end":233,"severity":"low","line_start":233},{"id":"blocker:references/hub_saving.md:261:system-reconnaissance","file":"references/hub_saving.md","pattern":"System reconnaissance","snippet":"**Valid names:**","category":"blocker","line_end":261,"severity":"low","line_start":261},{"id":"blocker:references/hub_saving.md:266:system-reconnaissance","file":"references/hub_saving.md","pattern":"System reconnaissance","snippet":"**Invalid names:**","category":"blocker","line_end":266,"severity":"low","line_start":266},{"id":"blocker:references/hub_saving.md:275:system-reconnaissance","file":"references/hub_saving.md","pattern":"System reconnaissance","snippet":"**Cause:** HF_TOKEN not provided or invalid","category":"blocker","line_end":277,"severity":"low","line_start":275},{"id":"blocker:references/hub_saving.md:279:system-reconnaissance","file":"references/hub_saving.md","pattern":"System reconnaissance","snippet":"2. Check you're logged in: `hf_whoami()`","category":"blocker","line_end":279,"severity":"low","line_start":279},{"id":"blocker:references/hub_saving.md:306:system-reconnaissance","file":"references/hub_saving.md","pattern":"System reconnaissance","snippet":"2. Verify token is valid","category":"blocker","line_end":307,"severity":"low","line_start":306},{"id":"network:references/token_usage.md:243:hardcoded-url","file":"references/token_usage.md","pattern":"Hardcoded URL","snippet":"401 Client Error: Unauthorized for url: https://huggingface.co/api/...","category":"network","line_end":243,"severity":"low","line_start":243},{"id":"network:references/token_usage.md:268:hardcoded-url","file":"references/token_usage.md","pattern":"Hardcoded URL","snippet":"403 Client Error: Forbidden for url: https://huggingface.co/api/...","category":"network","line_end":268,"severity":"low","line_start":268},{"id":"env_access:references/token_usage.md:132:python-environment-access","file":"references/token_usage.md","pattern":"Python environment access","snippet":"token = os.environ.get(\"HF_TOKEN\")","category":"env_access","line_end":132,"severity":"low","line_start":132},{"id":"env_access:references/token_usage.md:145:python-environment-access","file":"references/token_usage.md","pattern":"Python environment access","snippet":"api = HfApi(token=os.environ.get(\"HF_TOKEN\"))","category":"env_access","line_end":145,"severity":"low","line_start":145},{"id":"env_access:references/token_usage.md:184:python-environment-access","file":"references/token_usage.md","pattern":"Python environment access","snippet":"assert \"HF_TOKEN\" in os.environ, \"HF_TOKEN required for Hub operations!\"","category":"env_access","line_end":184,"severity":"low","line_start":184},{"id":"env_access:references/token_usage.md:219:python-environment-access","file":"references/token_usage.md","pattern":"Python environment access","snippet":"if \"HF_TOKEN\" not in os.environ:","category":"env_access","line_end":219,"severity":"low","line_start":219},{"id":"env_access:references/token_usage.md:222:python-environment-access","file":"references/token_usage.md","pattern":"Python environment access","snippet":"token = os.environ[\"HF_TOKEN\"]","category":"env_access","line_end":222,"severity":"low","line_start":222},{"id":"env_access:references/token_usage.md:261:python-environment-access","file":"references/token_usage.md","pattern":"Python environment access","snippet":"assert \"HF_TOKEN\" in os.environ, \"HF_TOKEN missing!\"","category":"env_access","line_end":261,"severity":"low","line_start":261},{"id":"env_access:references/token_usage.md:375:python-environment-access","file":"references/token_usage.md","pattern":"Python environment access","snippet":"token = os.environ.get(\"HF_TOKEN\")","category":"env_access","line_end":375,"severity":"low","line_start":375},{"id":"env_access:references/token_usage.md:455:python-environment-access","file":"references/token_usage.md","pattern":"Python environment access","snippet":"assert \"HF_TOKEN\" in os.environ, \"HF_TOKEN required!\"","category":"env_access","line_end":455,"severity":"low","line_start":455},{"id":"env_access:references/token_usage.md:484:python-environment-access","file":"references/token_usage.md","pattern":"Python environment access","snippet":"assert \"HF_TOKEN\" in os.environ, \"HF_TOKEN required!\"","category":"env_access","line_end":484,"severity":"low","line_start":484},{"id":"env_access:references/token_usage.md:510:python-environment-access","file":"references/token_usage.md","pattern":"Python environment access","snippet":"assert \"HF_TOKEN\" in os.environ, \"HF_TOKEN required!\"","category":"env_access","line_end":510,"severity":"low","line_start":510},{"id":"env_access:references/token_usage.md:534:python-environment-access","file":"references/token_usage.md","pattern":"Python environment access","snippet":"- [ ] Script checks for token: `assert \"HF_TOKEN\" in os.environ`","category":"env_access","line_end":534,"severity":"low","line_start":534},{"id":"env_access:references/token_usage.md:552:python-environment-access","file":"references/token_usage.md","pattern":"Python environment access","snippet":"api = HfApi(token=os.environ.get(\"HF_TOKEN\"))","category":"env_access","line_end":552,"severity":"low","line_start":552},{"id":"env_access:references/token_usage.md:558:python-environment-access","file":"references/token_usage.md","pattern":"Python environment access","snippet":"assert \"HF_TOKEN\" in os.environ, \"HF_TOKEN required!\"","category":"env_access","line_end":558,"severity":"low","line_start":558},{"id":"blocker:references/token_usage.md:57:system-reconnaissance","file":"references/token_usage.md","pattern":"System reconnaissance","snippet":"- Must be logged in: `hf auth login` or `hf_whoami()` works","category":"blocker","line_end":57,"severity":"low","line_start":57},{"id":"blocker:references/token_usage.md:80:system-reconnaissance","file":"references/token_usage.md","pattern":"System reconnaissance","snippet":"- The Jobs server receives this invalid string instead of a real token","category":"blocker","line_end":80,"severity":"low","line_start":80},{"id":"blocker:references/token_usage.md:204:system-reconnaissance","file":"references/token_usage.md","pattern":"System reconnaissance","snippet":"from huggingface_hub import whoami","category":"blocker","line_end":204,"severity":"low","line_start":204},{"id":"blocker:references/token_usage.md:207:system-reconnaissance","file":"references/token_usage.md","pattern":"System reconnaissance","snippet":"user_info = whoami()","category":"blocker","line_end":207,"severity":"low","line_start":207},{"id":"blocker:references/token_usage.md:226:system-reconnaissance","file":"references/token_usage.md","pattern":"System reconnaissance","snippet":"raise ValueError(f\"Invalid token format: {token[:10]}...\")","category":"blocker","line_end":226,"severity":"low","line_start":226},{"id":"blocker:references/token_usage.md:229:system-reconnaissance","file":"references/token_usage.md","pattern":"System reconnaissance","snippet":"from huggingface_hub import whoami","category":"blocker","line_end":229,"severity":"low","line_start":229},{"id":"blocker:references/token_usage.md:231:system-reconnaissance","file":"references/token_usage.md","pattern":"System reconnaissance","snippet":"user_info = whoami(token=token)","category":"blocker","line_end":231,"severity":"low","line_start":231},{"id":"blocker:references/token_usage.md:232:system-reconnaissance","file":"references/token_usage.md","pattern":"System reconnaissance","snippet":"print(f\"✅ Token valid for user: {user_info['name']}\")","category":"blocker","line_end":232,"severity":"low","line_start":232},{"id":"blocker:references/token_usage.md:248:system-reconnaissance","file":"references/token_usage.md","pattern":"System reconnaissance","snippet":"2. Token invalid or expired","category":"blocker","line_end":248,"severity":"low","line_start":248},{"id":"blocker:references/token_usage.md:253:system-reconnaissance","file":"references/token_usage.md","pattern":"System reconnaissance","snippet":"2. Verify `hf_whoami()` works locally","category":"blocker","line_end":253,"severity":"low","line_start":253},{"id":"blocker:references/token_usage.md:284:system-reconnaissance","file":"references/token_usage.md","pattern":"System reconnaissance","snippet":"from huggingface_hub import whoami","category":"blocker","line_end":284,"severity":"low","line_start":284},{"id":"blocker:references/token_usage.md:286:system-reconnaissance","file":"references/token_usage.md","pattern":"System reconnaissance","snippet":"user_info = whoami()","category":"blocker","line_end":286,"severity":"low","line_start":286},{"id":"blocker:references/token_usage.md:536:system-reconnaissance","file":"references/token_usage.md","pattern":"System reconnaissance","snippet":"- [ ] User is logged in: `hf_whoami()` works","category":"blocker","line_end":536,"severity":"low","line_start":536},{"id":"network:references/troubleshooting.md:11:hardcoded-url","file":"references/troubleshooting.md","pattern":"Hardcoded URL","snippet":"401 Client Error: Unauthorized for url: https://huggingface.co/api/...","category":"network","line_end":11,"severity":"low","line_start":11},{"id":"network:references/troubleshooting.md:36:hardcoded-url","file":"references/troubleshooting.md","pattern":"Hardcoded URL","snippet":"403 Client Error: Forbidden for url: https://huggingface.co/api/...","category":"network","line_end":36,"severity":"low","line_start":36},{"id":"network:references/troubleshooting.md:190:hardcoded-url","file":"references/troubleshooting.md","pattern":"Hardcoded URL","snippet":"hf_jobs(\"uv\", {\"script\": \"https://huggingface.co/user/repo/resolve/main/script.py\"})","category":"network","line_end":190,"severity":"low","line_start":190},{"id":"env_access:references/troubleshooting.md:29:python-environment-access","file":"references/troubleshooting.md","pattern":"Python environment access","snippet":"assert \"HF_TOKEN\" in os.environ, \"HF_TOKEN missing!\"","category":"env_access","line_end":29,"severity":"low","line_start":29},{"id":"env_access:references/troubleshooting.md:210:python-environment-access","file":"references/troubleshooting.md","pattern":"Python environment access","snippet":"1. Check token: `assert \"HF_TOKEN\" in os.environ`","category":"env_access","line_end":210,"severity":"low","line_start":210},{"id":"env_access:references/troubleshooting.md:372:python-environment-access","file":"references/troubleshooting.md","pattern":"Python environment access","snippet":"print(f\"HF_TOKEN present: {'HF_TOKEN' in os.environ}\")","category":"env_access","line_end":372,"severity":"low","line_start":372},{"id":"env_access:references/troubleshooting.md:448:python-environment-access","file":"references/troubleshooting.md","pattern":"Python environment access","snippet":"- [ ] Script checks for token: `assert \"HF_TOKEN\" in os.environ`","category":"env_access","line_end":448,"severity":"low","line_start":448},{"id":"blocker:references/troubleshooting.md:16:system-reconnaissance","file":"references/troubleshooting.md","pattern":"System reconnaissance","snippet":"- Token invalid or expired","category":"blocker","line_end":16,"severity":"low","line_start":16},{"id":"blocker:references/troubleshooting.md:21:system-reconnaissance","file":"references/troubleshooting.md","pattern":"System reconnaissance","snippet":"2. Verify `hf_whoami()` works locally","category":"blocker","line_end":21,"severity":"low","line_start":21},{"id":"blocker:references/troubleshooting.md:205:system-reconnaissance","file":"references/troubleshooting.md","pattern":"System reconnaissance","snippet":"- Token missing or invalid","category":"blocker","line_end":206,"severity":"low","line_start":205},{"id":"blocker:references/troubleshooting.md:474:system-reconnaissance","file":"references/troubleshooting.md","pattern":"System reconnaissance","snippet":"7. **Monitor costs** - Set timeouts to avoid unexpected charges","category":"blocker","line_end":474,"severity":"low","line_start":474},{"id":"external_commands:scripts/cot-self-instruct.py:430:ruby-shell-backtick-execution","file":"scripts/cot-self-instruct.py","pattern":"Ruby/shell backtick execution","snippet":"```bash","category":"external_commands","line_end":437,"severity":"medium","line_start":430},{"id":"external_commands:scripts/cot-self-instruct.py:44:shell-command-substitution","file":"scripts/cot-self-instruct.py","pattern":"Shell command substitution","snippet":"-e HF_TOKEN=$(python3 -c \"from huggingface_hub import get_token; print(get_token())\") \\\\","category":"external_commands","line_end":44,"severity":"medium","line_start":44},{"id":"external_commands:scripts/cot-self-instruct.py:707:shell-command-substitution","file":"scripts/cot-self-instruct.py","pattern":"Shell command substitution","snippet":"-e HF_TOKEN=$(python3 -c \"from huggingface_hub import get_token; print(get_token())\") \\\\","category":"external_commands","line_end":707,"severity":"medium","line_start":707},{"id":"network:scripts/cot-self-instruct.py:45:hardcoded-url","file":"scripts/cot-self-instruct.py","pattern":"Hardcoded URL","snippet":"https://huggingface.co/datasets/uv-scripts/synthetic-data/raw/main/cot-self-instruct.py \\\\","category":"network","line_end":45,"severity":"low","line_start":45},{"id":"network:scripts/cot-self-instruct.py:407:hardcoded-url","file":"scripts/cot-self-instruct.py","pattern":"Hardcoded URL","snippet":"- **Source Dataset**: [{source_dataset}](https://huggingface.co/datasets/{source_dataset})","category":"network","line_end":407,"severity":"low","line_start":407},{"id":"network:scripts/cot-self-instruct.py:408:hardcoded-url","file":"scripts/cot-self-instruct.py","pattern":"Hardcoded URL","snippet":"- **Generation Model**: [{generation_model}](https://huggingface.co/{generation_model})","category":"network","line_end":408,"severity":"low","line_start":408},{"id":"network:scripts/cot-self-instruct.py:427:hardcoded-url","file":"scripts/cot-self-instruct.py","pattern":"Hardcoded URL","snippet":"Generated using the CoT-Self-Instruct script from [uv-scripts/synthetic-data](https://huggingface.co","category":"network","line_end":427,"severity":"low","line_start":427},{"id":"network:scripts/cot-self-instruct.py:431:hardcoded-url","file":"scripts/cot-self-instruct.py","pattern":"Hardcoded URL","snippet":"uv run https://huggingface.co/datasets/uv-scripts/synthetic-data/raw/main/cot-self-instruct.py \\\\","category":"network","line_end":431,"severity":"low","line_start":431},{"id":"network:scripts/cot-self-instruct.py:700:hardcoded-url","file":"scripts/cot-self-instruct.py","pattern":"Hardcoded URL","snippet":"logger.info(\"Done! Dataset available at: https://huggingface.co/datasets/\" + args.output_dataset)","category":"network","line_end":700,"severity":"low","line_start":700},{"id":"network:scripts/cot-self-instruct.py:708:hardcoded-url","file":"scripts/cot-self-instruct.py","pattern":"Hardcoded URL","snippet":"https://huggingface.co/datasets/uv-scripts/synthetic-data/raw/main/cot-self-instruct.py \\\\","category":"network","line_end":708,"severity":"low","line_start":708},{"id":"env_access:scripts/cot-self-instruct.py:70:python-environment-access","file":"scripts/cot-self-instruct.py","pattern":"Python environment access","snippet":"os.environ[\"HF_HUB_ENABLE_HF_TRANSFER\"] = \"1\"","category":"env_access","line_end":70,"severity":"low","line_start":70},{"id":"env_access:scripts/cot-self-instruct.py:572:python-environment-access","file":"scripts/cot-self-instruct.py","pattern":"Python environment access","snippet":"hf_token = args.hf_token or os.environ.get(\"HF_TOKEN\")","category":"env_access","line_end":572,"severity":"low","line_start":572},{"id":"sensitive:scripts/cot-self-instruct.py:222:certificate-key-files","file":"scripts/cot-self-instruct.py","pattern":"Certificate/key files","snippet":"category = random.choice(list(categories.keys()))","category":"sensitive","line_end":222,"severity":"high","line_start":222},{"id":"external_commands:scripts/finepdfs-stats.py:240:ruby-shell-backtick-execution","file":"scripts/finepdfs-stats.py","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":242,"severity":"medium","line_start":240},{"id":"external_commands:scripts/finepdfs-stats.py:242:ruby-shell-backtick-execution","file":"scripts/finepdfs-stats.py","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":270,"severity":"medium","line_start":242},{"id":"external_commands:scripts/finepdfs-stats.py:270:ruby-shell-backtick-execution","file":"scripts/finepdfs-stats.py","pattern":"Ruby/shell backtick execution","snippet":"- `global_stats` - Overall summary","category":"external_commands","line_end":271,"severity":"medium","line_start":270},{"id":"external_commands:scripts/finepdfs-stats.py:271:ruby-shell-backtick-execution","file":"scripts/finepdfs-stats.py","pattern":"Ruby/shell backtick execution","snippet":"- `temporal_stats` - Per-dump breakdown (sorted chronologically)","category":"external_commands","line_end":275,"severity":"medium","line_start":271},{"id":"external_commands:scripts/finepdfs-stats.py:275:ruby-shell-backtick-execution","file":"scripts/finepdfs-stats.py","pattern":"Ruby/shell backtick execution","snippet":"```bash","category":"external_commands","line_end":278,"severity":"medium","line_start":275},{"id":"network:scripts/finepdfs-stats.py:34:hardcoded-url","file":"scripts/finepdfs-stats.py","pattern":"Hardcoded URL","snippet":"https://huggingface.co/datasets/uv-scripts/dataset-stats/raw/main/finepdfs-stats.py \\\\","category":"network","line_end":34,"severity":"low","line_start":34},{"id":"network:scripts/finepdfs-stats.py:276:hardcoded-url","file":"scripts/finepdfs-stats.py","pattern":"Hardcoded URL","snippet":"uv run https://huggingface.co/datasets/uv-scripts/dataset-stats/raw/main/finepdfs-stats.py \\\\","category":"network","line_end":276,"severity":"low","line_start":276},{"id":"network:scripts/finepdfs-stats.py:282:hardcoded-url","file":"scripts/finepdfs-stats.py","pattern":"Hardcoded URL","snippet":"- **Dataset**: [{args.source_dataset}](https://huggingface.co/datasets/{args.source_dataset})","category":"network","line_end":282,"severity":"low","line_start":282},{"id":"network:scripts/finepdfs-stats.py:283:hardcoded-url","file":"scripts/finepdfs-stats.py","pattern":"Hardcoded URL","snippet":"- **Script**: [uv-scripts/dataset-stats](https://huggingface.co/datasets/uv-scripts/dataset-stats)","category":"network","line_end":283,"severity":"low","line_start":283},{"id":"network:scripts/finepdfs-stats.py:527:hardcoded-url","file":"scripts/finepdfs-stats.py","pattern":"Hardcoded URL","snippet":"dataset_url = f\"https://huggingface.co/datasets/{args.output_repo}\"","category":"network","line_end":527,"severity":"low","line_start":527},{"id":"network:scripts/finepdfs-stats.py:554:hardcoded-url","file":"scripts/finepdfs-stats.py","pattern":"Hardcoded URL","snippet":"\"    https://huggingface.co/datasets/uv-scripts/dataset-stats/raw/main/finepdfs-stats.py \\\\\"","category":"network","line_end":554,"severity":"low","line_start":554},{"id":"env_access:scripts/finepdfs-stats.py:360:python-environment-access","file":"scripts/finepdfs-stats.py","pattern":"Python environment access","snippet":"if os.environ.get(\"HF_XET_HIGH_PERFORMANCE\"):","category":"env_access","line_end":360,"severity":"low","line_start":360},{"id":"env_access:scripts/finepdfs-stats.py:483:python-environment-access","file":"scripts/finepdfs-stats.py","pattern":"Python environment access","snippet":"hf_token = args.hf_token or os.environ.get(\"HF_TOKEN\")","category":"env_access","line_end":483,"severity":"low","line_start":483},{"id":"sensitive:scripts/finepdfs-stats.py:101:certificate-key-files","file":"scripts/finepdfs-stats.py","pattern":"Certificate/key files","snippet":"return list(COMMON_LANGUAGES.keys())","category":"sensitive","line_end":101,"severity":"high","line_start":101},{"id":"blocker:scripts/finepdfs-stats.py:513:system-reconnaissance","file":"scripts/finepdfs-stats.py","pattern":"System reconnaissance","snippet":"time.sleep(1)  # Avoid 409 conflicts","category":"blocker","line_end":513,"severity":"low","line_start":513},{"id":"external_commands:scripts/generate-responses.py:124:ruby-shell-backtick-execution","file":"scripts/generate-responses.py","pattern":"Ruby/shell backtick execution","snippet":"- **Input Column**: `{prompt_column if prompt_column else messages_column}` ({\"plain text prompts\" i","category":"external_commands","line_end":124,"severity":"medium","line_start":124},{"id":"external_commands:scripts/generate-responses.py:146:ruby-shell-backtick-execution","file":"scripts/generate-responses.py","pattern":"Ruby/shell backtick execution","snippet":"- `response`: The generated response from the model","category":"external_commands","line_end":146,"severity":"medium","line_start":146},{"id":"external_commands:scripts/generate-responses.py:154:ruby-shell-backtick-execution","file":"scripts/generate-responses.py","pattern":"Ruby/shell backtick execution","snippet":"```bash","category":"external_commands","line_end":164,"severity":"medium","line_start":154},{"id":"network:scripts/generate-responses.py:119:hardcoded-url","file":"scripts/generate-responses.py","pattern":"Hardcoded URL","snippet":"This dataset contains generated responses for prompts from [{source_dataset}](https://huggingface.co","category":"network","line_end":119,"severity":"low","line_start":119},{"id":"network:scripts/generate-responses.py:123:hardcoded-url","file":"scripts/generate-responses.py","pattern":"Hardcoded URL","snippet":"- **Source Dataset**: [{source_dataset}](https://huggingface.co/datasets/{source_dataset})","category":"network","line_end":123,"severity":"low","line_start":123},{"id":"network:scripts/generate-responses.py:125:hardcoded-url","file":"scripts/generate-responses.py","pattern":"Hardcoded URL","snippet":"- **Model**: [{model_id}](https://huggingface.co/{model_id})","category":"network","line_end":125,"severity":"low","line_start":125},{"id":"network:scripts/generate-responses.py:150:hardcoded-url","file":"scripts/generate-responses.py","pattern":"Hardcoded URL","snippet":"Generated using the vLLM inference script from [uv-scripts/vllm](https://huggingface.co/datasets/uv-","category":"network","line_end":150,"severity":"low","line_start":150},{"id":"network:scripts/generate-responses.py:155:hardcoded-url","file":"scripts/generate-responses.py","pattern":"Hardcoded URL","snippet":"uv run https://huggingface.co/datasets/uv-scripts/vllm/raw/main/generate-responses.py \\\\","category":"network","line_end":155,"severity":"low","line_start":155},{"id":"network:scripts/generate-responses.py:410:hardcoded-url","file":"scripts/generate-responses.py","pattern":"Hardcoded URL","snippet":"f\"Dataset available at: https://huggingface.co/datasets/{output_dataset_hub_id}\"","category":"network","line_end":410,"severity":"low","line_start":410},{"id":"network:scripts/generate-responses.py:580:hardcoded-url","file":"scripts/generate-responses.py","pattern":"Hardcoded URL","snippet":"https://huggingface.co/datasets/uv-scripts/vllm/raw/main/generate-responses.py \\\\","category":"network","line_end":580,"severity":"low","line_start":580},{"id":"env_access:scripts/generate-responses.py:56:python-environment-access","file":"scripts/generate-responses.py","pattern":"Python environment access","snippet":"os.environ[\"HF_HUB_ENABLE_HF_TRANSFER\"] = \"1\"","category":"env_access","line_end":56,"severity":"low","line_start":56},{"id":"env_access:scripts/generate-responses.py:228:python-environment-access","file":"scripts/generate-responses.py","pattern":"Python environment access","snippet":"HF_TOKEN = hf_token or os.environ.get(\"HF_TOKEN\") or get_token()","category":"env_access","line_end":228,"severity":"low","line_start":228},{"id":"blocker:scripts/generate-responses.py:32:system-reconnaissance","file":"scripts/generate-responses.py","pattern":"System reconnaissance","snippet":"--model-id meta-llama/Llama-3.1-8B-Instruct \\\\","category":"blocker","line_end":32,"severity":"low","line_start":32},{"id":"blocker:scripts/generate-responses.py:158:system-reconnaissance","file":"scripts/generate-responses.py","pattern":"System reconnaissance","snippet":"--model-id {model_id} \\\\","category":"blocker","line_end":158,"severity":"low","line_start":158},{"id":"blocker:scripts/generate-responses.py:363:system-reconnaissance","file":"scripts/generate-responses.py","pattern":"System reconnaissance","snippet":"logger.error(\"No valid prompts to process after filtering!\")","category":"blocker","line_end":363,"severity":"low","line_start":363},{"id":"blocker:scripts/generate-responses.py:367:system-reconnaissance","file":"scripts/generate-responses.py","pattern":"System reconnaissance","snippet":"logger.info(f\"Starting generation for {len(valid_prompts):,} valid prompts...\")","category":"blocker","line_end":367,"severity":"low","line_start":367},{"id":"blocker:scripts/generate-responses.py:426:system-reconnaissance","file":"scripts/generate-responses.py","pattern":"System reconnaissance","snippet":"--model-id meta-llama/Llama-3.1-8B-Instruct \\\\","category":"blocker","line_end":426,"severity":"low","line_start":426},{"id":"blocker:scripts/generate-responses.py:584:system-reconnaissance","file":"scripts/generate-responses.py","pattern":"System reconnaissance","snippet":"--model-id Qwen/Qwen3-30B-A3B-Instruct-2507 \\\\","category":"blocker","line_end":584,"severity":"low","line_start":584},{"id":"scripts:SKILL.md:793:dynamic-import-expression","file":"SKILL.md","pattern":"Dynamic import() expression","snippet":"from huggingface_hub import (","category":"scripts","line_end":799,"severity":"medium","line_start":793},{"id":"external_commands:SKILL.md:19:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- **Model Training** - Fine-tune models (see `model-trainer` skill for TRL-specific training)","category":"external_commands","line_end":19,"severity":"medium","line_start":19},{"id":"external_commands:SKILL.md:24:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"**For model training specifically:** See the `model-trainer` skill for TRL-based training workflows.","category":"external_commands","line_end":24,"severity":"medium","line_start":24},{"id":"external_commands:SKILL.md:41:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"1. **ALWAYS use `hf_jobs()` MCP tool** - Submit jobs using `hf_jobs(\"uv\", {...})` or `hf_jobs(\"run\",","category":"external_commands","line_end":41,"severity":"medium","line_start":41},{"id":"external_commands:SKILL.md:43:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"2. **Always handle authentication** - Jobs that interact with the Hub require `HF_TOKEN` via secrets","category":"external_commands","line_end":43,"severity":"medium","line_start":43},{"id":"external_commands:SKILL.md:55:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- Authenticated login: Check with `hf_whoami()`","category":"external_commands","line_end":55,"severity":"medium","line_start":55},{"id":"external_commands:SKILL.md:68:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```python","category":"external_commands","line_end":75,"severity":"medium","line_start":68},{"id":"external_commands:SKILL.md:75:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":77,"severity":"medium","line_start":75},{"id":"external_commands:SKILL.md:77:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"**⚠️ CRITICAL:** The `$HF_TOKEN` placeholder is ONLY auto-replaced by the `hf_jobs` MCP tool. When u","category":"external_commands","line_end":77,"severity":"medium","line_start":77},{"id":"external_commands:SKILL.md:86:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- Stored securely on your machine after `hf auth login`","category":"external_commands","line_end":111,"severity":"medium","line_start":86},{"id":"external_commands:SKILL.md:111:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```python","category":"external_commands","line_end":116,"severity":"medium","line_start":111},{"id":"external_commands:SKILL.md:116:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":119,"severity":"medium","line_start":116},{"id":"external_commands:SKILL.md:119:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- `$HF_TOKEN` is a placeholder that gets replaced with your actual token","category":"external_commands","line_end":120,"severity":"medium","line_start":119},{"id":"external_commands:SKILL.md:120:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- Uses the token from your logged-in session (`hf auth login`)","category":"external_commands","line_end":132,"severity":"medium","line_start":120},{"id":"external_commands:SKILL.md:132:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```python","category":"external_commands","line_end":137,"severity":"medium","line_start":132},{"id":"external_commands:SKILL.md:137:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":151,"severity":"medium","line_start":137},{"id":"external_commands:SKILL.md:151:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```python","category":"external_commands","line_end":156,"severity":"medium","line_start":151},{"id":"external_commands:SKILL.md:156:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":159,"severity":"medium","line_start":156},{"id":"external_commands:SKILL.md:159:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- `env` variables are visible in job logs","category":"external_commands","line_end":160,"severity":"medium","line_start":159},{"id":"external_commands:SKILL.md:160:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- `secrets` are encrypted server-side","category":"external_commands","line_end":161,"severity":"medium","line_start":160},{"id":"external_commands:SKILL.md:161:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- Always prefer `secrets` for tokens","category":"external_commands","line_end":167,"severity":"medium","line_start":161},{"id":"external_commands:SKILL.md:167:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```python","category":"external_commands","line_end":183,"severity":"medium","line_start":167},{"id":"external_commands:SKILL.md:183:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":187,"severity":"medium","line_start":183},{"id":"external_commands:SKILL.md:187:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- Use `os.environ.get(\"HF_TOKEN\")` to access","category":"external_commands","line_end":188,"severity":"medium","line_start":187},{"id":"external_commands:SKILL.md:188:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- Let `huggingface_hub` auto-detect when possible","category":"external_commands","line_end":194,"severity":"medium","line_start":188},{"id":"external_commands:SKILL.md:194:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```python","category":"external_commands","line_end":197,"severity":"medium","line_start":194},{"id":"external_commands:SKILL.md:197:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":200,"severity":"medium","line_start":197},{"id":"external_commands:SKILL.md:200:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```python","category":"external_commands","line_end":205,"severity":"medium","line_start":200},{"id":"external_commands:SKILL.md:205:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":211,"severity":"medium","line_start":205},{"id":"external_commands:SKILL.md:211:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- **Fix:** Add `secrets={\"HF_TOKEN\": \"$HF_TOKEN\"}` to job config","category":"external_commands","line_end":212,"severity":"medium","line_start":211},{"id":"external_commands:SKILL.md:212:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- **Verify:** Check `hf_whoami()` works locally","category":"external_commands","line_end":220,"severity":"medium","line_start":212},{"id":"external_commands:SKILL.md:220:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- **Cause:** `secrets` not passed or wrong key name","category":"external_commands","line_end":221,"severity":"medium","line_start":220},{"id":"external_commands:SKILL.md:221:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- **Fix:** Use `secrets={\"HF_TOKEN\": \"$HF_TOKEN\"}` (not `env`)","category":"external_commands","line_end":221,"severity":"medium","line_start":221},{"id":"external_commands:SKILL.md:222:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- **Verify:** Script checks `os.environ.get(\"HF_TOKEN\")`","category":"external_commands","line_end":231,"severity":"medium","line_start":222},{"id":"external_commands:SKILL.md:231:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"1. **Never commit tokens** - Use `$HF_TOKEN` placeholder or environment variables","category":"external_commands","line_end":240,"severity":"medium","line_start":231},{"id":"external_commands:SKILL.md:240:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```python","category":"external_commands","line_end":269,"severity":"medium","line_start":240},{"id":"external_commands:SKILL.md:269:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":278,"severity":"medium","line_start":269},{"id":"external_commands:SKILL.md:278:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```python","category":"external_commands","line_end":296,"severity":"medium","line_start":278},{"id":"external_commands:SKILL.md:296:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":299,"severity":"medium","line_start":296},{"id":"external_commands:SKILL.md:299:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```bash","category":"external_commands","line_end":301,"severity":"medium","line_start":299},{"id":"external_commands:SKILL.md:301:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":304,"severity":"medium","line_start":301},{"id":"external_commands:SKILL.md:304:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```python","category":"external_commands","line_end":307,"severity":"medium","line_start":304},{"id":"external_commands:SKILL.md:307:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":311,"severity":"medium","line_start":307},{"id":"external_commands:SKILL.md:311:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"**When to use:** Default choice for all workloads, custom logic, any scenario requiring `hf_jobs()`","category":"external_commands","line_end":315,"severity":"medium","line_start":311},{"id":"external_commands:SKILL.md:315:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"By default, UV scripts use `ghcr.io/astral-sh/uv:python3.12-bookworm-slim`. For ML workloads with co","category":"external_commands","line_end":317,"severity":"medium","line_start":315},{"id":"external_commands:SKILL.md:317:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```python","category":"external_commands","line_end":323,"severity":"medium","line_start":317},{"id":"external_commands:SKILL.md:323:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":326,"severity":"medium","line_start":323},{"id":"external_commands:SKILL.md:326:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```bash","category":"external_commands","line_end":328,"severity":"medium","line_start":326},{"id":"external_commands:SKILL.md:328:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":336,"severity":"medium","line_start":328},{"id":"external_commands:SKILL.md:336:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```python","category":"external_commands","line_end":342,"severity":"medium","line_start":336},{"id":"external_commands:SKILL.md:342:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":345,"severity":"medium","line_start":342},{"id":"external_commands:SKILL.md:345:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```python","category":"external_commands","line_end":348,"severity":"medium","line_start":345},{"id":"external_commands:SKILL.md:348:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":354,"severity":"medium","line_start":348},{"id":"external_commands:SKILL.md:354:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- **Using the `hf_jobs()` MCP tool (recommended in this repo)**: the `script` value must be **inline","category":"external_commands","line_end":354,"severity":"medium","line_start":354},{"id":"external_commands:SKILL.md:355:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- **Using the `hf jobs uv run` CLI**: local file paths **do work** (the CLI uploads your script).","category":"external_commands","line_end":357,"severity":"medium","line_start":355},{"id":"external_commands:SKILL.md:357:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"**Common mistake with `hf_jobs()` MCP tool:**","category":"external_commands","line_end":359,"severity":"medium","line_start":357},{"id":"external_commands:SKILL.md:359:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```python","category":"external_commands","line_end":362,"severity":"medium","line_start":359},{"id":"external_commands:SKILL.md:362:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":364,"severity":"medium","line_start":362},{"id":"external_commands:SKILL.md:364:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"**Correct patterns with `hf_jobs()` MCP tool:**","category":"external_commands","line_end":366,"severity":"medium","line_start":364},{"id":"external_commands:SKILL.md:366:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```python","category":"external_commands","line_end":377,"severity":"medium","line_start":366},{"id":"external_commands:SKILL.md:377:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":381,"severity":"medium","line_start":377},{"id":"external_commands:SKILL.md:381:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```bash","category":"external_commands","line_end":383,"severity":"medium","line_start":381},{"id":"external_commands:SKILL.md:383:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":389,"severity":"medium","line_start":383},{"id":"external_commands:SKILL.md:389:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```python","category":"external_commands","line_end":395,"severity":"medium","line_start":389},{"id":"external_commands:SKILL.md:395:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":398,"severity":"medium","line_start":395},{"id":"external_commands:SKILL.md:398:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```python","category":"external_commands","line_end":401,"severity":"medium","line_start":398},{"id":"external_commands:SKILL.md:401:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":408,"severity":"medium","line_start":401},{"id":"external_commands:SKILL.md:408:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```python","category":"external_commands","line_end":415,"severity":"medium","line_start":408},{"id":"external_commands:SKILL.md:415:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":418,"severity":"medium","line_start":415},{"id":"external_commands:SKILL.md:418:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```bash","category":"external_commands","line_end":420,"severity":"medium","line_start":418},{"id":"external_commands:SKILL.md:420:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":423,"severity":"medium","line_start":420},{"id":"external_commands:SKILL.md:423:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```python","category":"external_commands","line_end":426,"severity":"medium","line_start":423},{"id":"external_commands:SKILL.md:426:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":432,"severity":"medium","line_start":426},{"id":"external_commands:SKILL.md:432:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```python","category":"external_commands","line_end":439,"severity":"medium","line_start":432},{"id":"external_commands:SKILL.md:439:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":444,"severity":"medium","line_start":439},{"id":"external_commands:SKILL.md:444:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```python","category":"external_commands","line_end":450,"severity":"medium","line_start":444},{"id":"external_commands:SKILL.md:450:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":453,"severity":"medium","line_start":450},{"id":"external_commands:SKILL.md:453:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```bash","category":"external_commands","line_end":455,"severity":"medium","line_start":453},{"id":"external_commands:SKILL.md:455:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":459,"severity":"medium","line_start":455},{"id":"external_commands:SKILL.md:459:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"The `uv-scripts` organization provides ready-to-use UV scripts stored as datasets on Hugging Face Hu","category":"external_commands","line_end":461,"severity":"medium","line_start":459},{"id":"external_commands:SKILL.md:461:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```python","category":"external_commands","line_end":467,"severity":"medium","line_start":461},{"id":"external_commands:SKILL.md:467:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":477,"severity":"medium","line_start":467},{"id":"external_commands:SKILL.md:477:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"| Data processing, testing | `cpu-basic`, `cpu-upgrade` | Lightweight tasks |","category":"external_commands","line_end":477,"severity":"medium","line_start":477},{"id":"external_commands:SKILL.md:478:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"| Small models, demos | `t4-small` | <1B models, quick tests |","category":"external_commands","line_end":479,"severity":"medium","line_start":478},{"id":"external_commands:SKILL.md:479:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"| Medium models | `t4-medium`, `l4x1` | 1-7B models |","category":"external_commands","line_end":479,"severity":"medium","line_start":479},{"id":"external_commands:SKILL.md:480:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"| Large models, production | `a10g-small`, `a10g-large` | 7-13B models |","category":"external_commands","line_end":480,"severity":"medium","line_start":480},{"id":"external_commands:SKILL.md:481:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"| Very large models | `a100-large` | 13B+ models |","category":"external_commands","line_end":482,"severity":"medium","line_start":481},{"id":"external_commands:SKILL.md:482:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"| Batch inference | `a10g-large`, `a100-large` | High-throughput |","category":"external_commands","line_end":482,"severity":"medium","line_start":482},{"id":"external_commands:SKILL.md:483:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"| Multi-GPU workloads | `l4x4`, `a10g-largex2`, `a10g-largex4` | Parallel/large models |","category":"external_commands","line_end":483,"severity":"medium","line_start":483},{"id":"external_commands:SKILL.md:484:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"| TPU workloads | `v5e-1x1`, `v5e-2x2`, `v5e-2x4` | JAX/Flax, TPU-optimized |","category":"external_commands","line_end":484,"severity":"medium","line_start":484},{"id":"external_commands:SKILL.md:487:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- **CPU:** `cpu-basic`, `cpu-upgrade`","category":"external_commands","line_end":487,"severity":"medium","line_start":487},{"id":"external_commands:SKILL.md:488:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- **GPU:** `t4-small`, `t4-medium`, `l4x1`, `l4x4`, `a10g-small`, `a10g-large`, `a10g-largex2`, `a10","category":"external_commands","line_end":488,"severity":"medium","line_start":488},{"id":"external_commands:SKILL.md:489:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- **TPU:** `v5e-1x1`, `v5e-2x2`, `v5e-2x4`","category":"external_commands","line_end":489,"severity":"medium","line_start":489},{"id":"external_commands:SKILL.md:496:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- See `references/hardware_guide.md` for detailed specifications","category":"external_commands","line_end":508,"severity":"medium","line_start":496},{"id":"external_commands:SKILL.md:508:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```python","category":"external_commands","line_end":522,"severity":"medium","line_start":508},{"id":"external_commands:SKILL.md:522:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":526,"severity":"medium","line_start":522},{"id":"external_commands:SKILL.md:526:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```python","category":"external_commands","line_end":531,"severity":"medium","line_start":526},{"id":"external_commands:SKILL.md:531:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":535,"severity":"medium","line_start":531},{"id":"external_commands:SKILL.md:535:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```python","category":"external_commands","line_end":539,"severity":"medium","line_start":535},{"id":"external_commands:SKILL.md:539:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":544,"severity":"medium","line_start":539},{"id":"external_commands:SKILL.md:544:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```python","category":"external_commands","line_end":551,"severity":"medium","line_start":544},{"id":"external_commands:SKILL.md:551:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":554,"severity":"medium","line_start":551},{"id":"external_commands:SKILL.md:554:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```python","category":"external_commands","line_end":563,"severity":"medium","line_start":554},{"id":"external_commands:SKILL.md:563:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":569,"severity":"medium","line_start":563},{"id":"external_commands:SKILL.md:569:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- [ ] Token in secrets if using Hub (MCP: `\"$HF_TOKEN\"`, Python API: `get_token()`)","category":"external_commands","line_end":569,"severity":"medium","line_start":569},{"id":"external_commands:SKILL.md:573:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"**See:** `references/hub_saving.md` for detailed Hub persistence guide","category":"external_commands","line_end":584,"severity":"medium","line_start":573},{"id":"external_commands:SKILL.md:584:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```python","category":"external_commands","line_end":588,"severity":"medium","line_start":584},{"id":"external_commands:SKILL.md:588:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":591,"severity":"medium","line_start":588},{"id":"external_commands:SKILL.md:591:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- Integer/float: seconds (e.g., `300` = 5 minutes)","category":"external_commands","line_end":592,"severity":"medium","line_start":591},{"id":"external_commands:SKILL.md:592:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- String with suffix: `\"5m\"` (minutes), `\"2h\"` (hours), `\"1d\"` (days)","category":"external_commands","line_end":592,"severity":"medium","line_start":592},{"id":"external_commands:SKILL.md:593:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- Examples: `\"90m\"`, `\"2h\"`, `\"1.5h\"`, `300`, `\"1d\"`","category":"external_commands","line_end":593,"severity":"medium","line_start":593},{"id":"external_commands:SKILL.md:596:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```python","category":"external_commands","line_end":601,"severity":"medium","line_start":596},{"id":"external_commands:SKILL.md:601:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":621,"severity":"medium","line_start":601},{"id":"external_commands:SKILL.md:621:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":623,"severity":"medium","line_start":621},{"id":"external_commands:SKILL.md:623:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":654,"severity":"medium","line_start":623},{"id":"external_commands:SKILL.md:654:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```python","category":"external_commands","line_end":666,"severity":"medium","line_start":654},{"id":"external_commands:SKILL.md:666:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":669,"severity":"medium","line_start":666},{"id":"external_commands:SKILL.md:669:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```python","category":"external_commands","line_end":687,"severity":"medium","line_start":669},{"id":"external_commands:SKILL.md:687:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":690,"severity":"medium","line_start":687},{"id":"external_commands:SKILL.md:690:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```bash","category":"external_commands","line_end":694,"severity":"medium","line_start":690},{"id":"external_commands:SKILL.md:694:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":701,"severity":"medium","line_start":694},{"id":"external_commands:SKILL.md:701:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":703,"severity":"medium","line_start":701},{"id":"external_commands:SKILL.md:703:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":709,"severity":"medium","line_start":703},{"id":"external_commands:SKILL.md:709:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```python","category":"external_commands","line_end":720,"severity":"medium","line_start":709},{"id":"external_commands:SKILL.md:720:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":727,"severity":"medium","line_start":720},{"id":"external_commands:SKILL.md:727:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```python","category":"external_commands","line_end":749,"severity":"medium","line_start":727},{"id":"external_commands:SKILL.md:749:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":752,"severity":"medium","line_start":749},{"id":"external_commands:SKILL.md:752:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```python","category":"external_commands","line_end":771,"severity":"medium","line_start":752},{"id":"external_commands:SKILL.md:771:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":774,"severity":"medium","line_start":771},{"id":"external_commands:SKILL.md:774:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- `@annually`, `@yearly` - Once per year","category":"external_commands","line_end":774,"severity":"medium","line_start":774},{"id":"external_commands:SKILL.md:775:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- `@monthly` - Once per month","category":"external_commands","line_end":776,"severity":"medium","line_start":775},{"id":"external_commands:SKILL.md:776:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- `@weekly` - Once per week","category":"external_commands","line_end":777,"severity":"medium","line_start":776},{"id":"external_commands:SKILL.md:777:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- `@daily` - Once per day","category":"external_commands","line_end":778,"severity":"medium","line_start":777},{"id":"external_commands:SKILL.md:778:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- `@hourly` - Once per hour","category":"external_commands","line_end":779,"severity":"medium","line_start":778},{"id":"external_commands:SKILL.md:779:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- CRON expression - Custom schedule (e.g., `\"*/5 * * * *\"` for every 5 minutes)","category":"external_commands","line_end":782,"severity":"medium","line_start":779},{"id":"external_commands:SKILL.md:782:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```python","category":"external_commands","line_end":789,"severity":"medium","line_start":782},{"id":"external_commands:SKILL.md:789:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":792,"severity":"medium","line_start":789},{"id":"external_commands:SKILL.md:792:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```python","category":"external_commands","line_end":815,"severity":"medium","line_start":792},{"id":"external_commands:SKILL.md:815:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":822,"severity":"medium","line_start":815},{"id":"external_commands:SKILL.md:822:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```python","category":"external_commands","line_end":835,"severity":"medium","line_start":822},{"id":"external_commands:SKILL.md:835:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":839,"severity":"medium","line_start":835},{"id":"external_commands:SKILL.md:839:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"2. When triggered, the job runs with `WEBHOOK_PAYLOAD` environment variable","category":"external_commands","line_end":849,"severity":"medium","line_start":839},{"id":"external_commands:SKILL.md:849:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```python","category":"external_commands","line_end":855,"severity":"medium","line_start":849},{"id":"external_commands:SKILL.md:855:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":861,"severity":"medium","line_start":855},{"id":"external_commands:SKILL.md:861:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"This repository ships ready-to-run UV scripts in `hf-jobs/scripts/`. Prefer using them instead of in","category":"external_commands","line_end":863,"severity":"medium","line_start":861},{"id":"external_commands:SKILL.md:863:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"### Pattern 1: Dataset → Model Responses (vLLM) — `scripts/generate-responses.py`","category":"external_commands","line_end":865,"severity":"medium","line_start":863},{"id":"external_commands:SKILL.md:865:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"**What it does:** loads a Hub dataset (chat `messages` or a `prompt` column), applies a model chat t","category":"external_commands","line_end":865,"severity":"medium","line_start":865},{"id":"external_commands:SKILL.md:869:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```python","category":"external_commands","line_end":888,"severity":"medium","line_start":869},{"id":"external_commands:SKILL.md:888:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":890,"severity":"medium","line_start":888},{"id":"external_commands:SKILL.md:890:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"### Pattern 2: CoT Self-Instruct Synthetic Data — `scripts/cot-self-instruct.py`","category":"external_commands","line_end":896,"severity":"medium","line_start":890},{"id":"external_commands:SKILL.md:896:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```python","category":"external_commands","line_end":913,"severity":"medium","line_start":896},{"id":"external_commands:SKILL.md:913:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":915,"severity":"medium","line_start":913},{"id":"external_commands:SKILL.md:915:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"### Pattern 3: Streaming Dataset Stats (Polars + HF Hub) — `scripts/finepdfs-stats.py`","category":"external_commands","line_end":919,"severity":"medium","line_start":915},{"id":"external_commands:SKILL.md:919:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"**Requires:** CPU is often enough; token needed **only** if you pass `--output-repo` (upload).","category":"external_commands","line_end":921,"severity":"medium","line_start":919},{"id":"external_commands:SKILL.md:921:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```python","category":"external_commands","line_end":937,"severity":"medium","line_start":921},{"id":"external_commands:SKILL.md:937:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":952,"severity":"medium","line_start":937},{"id":"external_commands:SKILL.md:952:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"2. Increase timeout with buffer: `\"timeout\": \"3h\"`","category":"external_commands","line_end":959,"severity":"medium","line_start":952},{"id":"external_commands:SKILL.md:959:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"1. Add token to secrets: MCP uses `\"$HF_TOKEN\"` (auto-replaced), Python API uses `get_token()` (must","category":"external_commands","line_end":959,"severity":"medium","line_start":959},{"id":"external_commands:SKILL.md:960:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"2. Verify token in script: `assert \"HF_TOKEN\" in os.environ`","category":"external_commands","line_end":968,"severity":"medium","line_start":960},{"id":"external_commands:SKILL.md:968:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```python","category":"external_commands","line_end":972,"severity":"medium","line_start":968},{"id":"external_commands:SKILL.md:972:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":977,"severity":"medium","line_start":972},{"id":"external_commands:SKILL.md:977:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"1. Check `hf_whoami()` works locally","category":"external_commands","line_end":978,"severity":"medium","line_start":977},{"id":"external_commands:SKILL.md:978:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"2. Verify token in secrets — MCP: `\"$HF_TOKEN\"`, Python API: `get_token()` (NOT `\"$HF_TOKEN\"`)","category":"external_commands","line_end":978,"severity":"medium","line_start":978},{"id":"external_commands:SKILL.md:979:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"3. Re-login: `hf auth login`","category":"external_commands","line_end":991,"severity":"medium","line_start":979},{"id":"external_commands:SKILL.md:991:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"**See:** `references/troubleshooting.md` for complete troubleshooting guide","category":"external_commands","line_end":996,"severity":"medium","line_start":991},{"id":"external_commands:SKILL.md:996:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- `references/token_usage.md` - Complete token usage guide","category":"external_commands","line_end":997,"severity":"medium","line_start":996},{"id":"external_commands:SKILL.md:997:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- `references/hardware_guide.md` - Hardware specs and selection","category":"external_commands","line_end":998,"severity":"medium","line_start":997},{"id":"external_commands:SKILL.md:998:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- `references/hub_saving.md` - Hub persistence guide","category":"external_commands","line_end":999,"severity":"medium","line_start":998},{"id":"external_commands:SKILL.md:999:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- `references/troubleshooting.md` - Common issues and solutions","category":"external_commands","line_end":1002,"severity":"medium","line_start":999},{"id":"external_commands:SKILL.md:1002:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- `scripts/generate-responses.py` - vLLM batch generation: dataset → responses → push to Hub","category":"external_commands","line_end":1003,"severity":"medium","line_start":1002},{"id":"external_commands:SKILL.md:1003:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- `scripts/cot-self-instruct.py` - CoT Self-Instruct synthetic data generation + filtering → push to","category":"external_commands","line_end":1004,"severity":"medium","line_start":1003},{"id":"external_commands:SKILL.md:1004:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- `scripts/finepdfs-stats.py` - Polars streaming stats over `finepdfs-edu` parquet on Hub (optional ","category":"external_commands","line_end":1004,"severity":"medium","line_start":1004},{"id":"external_commands:SKILL.md:1022:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"1. **Submit scripts inline** - The `script` parameter accepts Python code directly; no file saving r","category":"external_commands","line_end":1026,"severity":"medium","line_start":1022},{"id":"external_commands:SKILL.md:1026:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"5. **Use tokens securely** - MCP: `secrets={\"HF_TOKEN\": \"$HF_TOKEN\"}`, Python API: `secrets={\"HF_TOK","category":"external_commands","line_end":1026,"severity":"medium","line_start":1026},{"id":"external_commands:SKILL.md:1028:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"7. **Use UV scripts** - Default to `hf_jobs(\"uv\", {...})` with inline scripts for Python workloads","category":"external_commands","line_end":1037,"severity":"medium","line_start":1028},{"id":"external_commands:SKILL.md:1037:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"| Run UV script | `hf_jobs(\"uv\", {...})` | `hf jobs uv run script.py` | `run_uv_job(\"script.py\")` |","category":"external_commands","line_end":1037,"severity":"medium","line_start":1037},{"id":"external_commands:SKILL.md:1038:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"| Run Docker job | `hf_jobs(\"run\", {...})` | `hf jobs run image cmd` | `run_job(image, command)` |","category":"external_commands","line_end":1038,"severity":"medium","line_start":1038},{"id":"external_commands:SKILL.md:1039:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"| List jobs | `hf_jobs(\"ps\")` | `hf jobs ps` | `list_jobs()` |","category":"external_commands","line_end":1039,"severity":"medium","line_start":1039},{"id":"external_commands:SKILL.md:1040:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"| View logs | `hf_jobs(\"logs\", {...})` | `hf jobs logs <id>` | `fetch_job_logs(job_id)` |","category":"external_commands","line_end":1040,"severity":"medium","line_start":1040},{"id":"external_commands:SKILL.md:1041:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"| Cancel job | `hf_jobs(\"cancel\", {...})` | `hf jobs cancel <id>` | `cancel_job(job_id)` |","category":"external_commands","line_end":1041,"severity":"medium","line_start":1041},{"id":"external_commands:SKILL.md:1042:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"| Schedule UV | `hf_jobs(\"scheduled uv\", {...})` | `hf jobs scheduled uv run SCHEDULE script.py` | `","category":"external_commands","line_end":1042,"severity":"medium","line_start":1042},{"id":"external_commands:SKILL.md:1043:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"| Schedule Docker | `hf_jobs(\"scheduled run\", {...})` | `hf jobs scheduled run SCHEDULE image cmd` |","category":"external_commands","line_end":1043,"severity":"medium","line_start":1043},{"id":"external_commands:SKILL.md:1044:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"| List scheduled | `hf_jobs(\"scheduled ps\")` | `hf jobs scheduled ps` | `list_scheduled_jobs()` |","category":"external_commands","line_end":1044,"severity":"medium","line_start":1044},{"id":"external_commands:SKILL.md:1045:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"| Delete scheduled | `hf_jobs(\"scheduled delete\", {...})` | `hf jobs scheduled delete <id>` | `delet","category":"external_commands","line_end":1045,"severity":"medium","line_start":1045},{"id":"network:SKILL.md:538:python-http-libraries","file":"SKILL.md","pattern":"Python HTTP libraries","snippet":"requests.post(\"https://your-api.com/results\", json=results)","category":"network","line_end":538,"severity":"low","line_start":538},{"id":"network:SKILL.md:2:hardcoded-url","file":"SKILL.md","pattern":"Hardcoded URL","snippet":"source: \"https://github.com/huggingface/skills/tree/main/skills/huggingface-jobs\"","category":"network","line_end":2,"severity":"low","line_start":2},{"id":"network:SKILL.md:54:hardcoded-url","file":"SKILL.md","pattern":"Hardcoded URL","snippet":"- Hugging Face Account with [Pro](https://hf.co/pro), [Team](https://hf.co/enterprise), or [Enterpri","category":"network","line_end":54,"severity":"low","line_start":54},{"id":"network:SKILL.md:217:hardcoded-url","file":"SKILL.md","pattern":"Hardcoded URL","snippet":"- **Check:** Token type at https://huggingface.co/settings/tokens","category":"network","line_end":217,"severity":"low","line_start":217},{"id":"network:SKILL.md:373:hardcoded-url","file":"SKILL.md","pattern":"Hardcoded URL","snippet":"hf_jobs(\"uv\", {\"script\": \"https://huggingface.co/datasets/uv-scripts/.../raw/main/foo.py\"})","category":"network","line_end":373,"severity":"low","line_start":373},{"id":"network:SKILL.md:376:hardcoded-url","file":"SKILL.md","pattern":"Hardcoded URL","snippet":"hf_jobs(\"uv\", {\"script\": \"https://raw.githubusercontent.com/huggingface/trl/main/trl/scripts/sft.py\"","category":"network","line_end":376,"severity":"low","line_start":376},{"id":"network:SKILL.md:473:hardcoded-url","file":"SKILL.md","pattern":"Hardcoded URL","snippet":"> **Reference:** [HF Jobs Hardware Docs](https://huggingface.co/docs/hub/en/spaces-config-reference)","category":"network","line_end":473,"severity":"low","line_start":473},{"id":"network:SKILL.md:538:hardcoded-url","file":"SKILL.md","pattern":"Hardcoded URL","snippet":"requests.post(\"https://your-api.com/results\", json=results)","category":"network","line_end":538,"severity":"low","line_start":538},{"id":"network:SKILL.md:702:hardcoded-url","file":"SKILL.md","pattern":"Hardcoded URL","snippet":"https://huggingface.co/jobs/username/job-id","category":"network","line_end":702,"severity":"low","line_start":702},{"id":"network:SKILL.md:857:hardcoded-url","file":"SKILL.md","pattern":"Hardcoded URL","snippet":"See [Webhooks Documentation](https://huggingface.co/docs/huggingface_hub/guides/webhooks) for more d","category":"network","line_end":857,"severity":"low","line_start":857},{"id":"network:SKILL.md:1009:hardcoded-url","file":"SKILL.md","pattern":"Hardcoded URL","snippet":"- [HF Jobs Guide](https://huggingface.co/docs/huggingface_hub/guides/jobs) - Main documentation","category":"network","line_end":1009,"severity":"low","line_start":1009},{"id":"network:SKILL.md:1010:hardcoded-url","file":"SKILL.md","pattern":"Hardcoded URL","snippet":"- [HF Jobs CLI Reference](https://huggingface.co/docs/huggingface_hub/guides/cli#hf-jobs) - Command ","category":"network","line_end":1010,"severity":"low","line_start":1010},{"id":"network:SKILL.md:1011:hardcoded-url","file":"SKILL.md","pattern":"Hardcoded URL","snippet":"- [HF Jobs API Reference](https://huggingface.co/docs/huggingface_hub/package_reference/hf_api) - Py","category":"network","line_end":1011,"severity":"low","line_start":1011},{"id":"network:SKILL.md:1012:hardcoded-url","file":"SKILL.md","pattern":"Hardcoded URL","snippet":"- [Hardware Flavors Reference](https://huggingface.co/docs/hub/en/spaces-config-reference) - Availab","category":"network","line_end":1012,"severity":"low","line_start":1012},{"id":"network:SKILL.md:1015:hardcoded-url","file":"SKILL.md","pattern":"Hardcoded URL","snippet":"- [UV Scripts Guide](https://docs.astral.sh/uv/guides/scripts/) - PEP 723 inline dependencies","category":"network","line_end":1015,"severity":"low","line_start":1015},{"id":"network:SKILL.md:1016:hardcoded-url","file":"SKILL.md","pattern":"Hardcoded URL","snippet":"- [UV Scripts Organization](https://huggingface.co/uv-scripts) - Community UV script collection","category":"network","line_end":1016,"severity":"low","line_start":1016},{"id":"network:SKILL.md:1017:hardcoded-url","file":"SKILL.md","pattern":"Hardcoded URL","snippet":"- [HF Hub Authentication](https://huggingface.co/docs/huggingface_hub/quick-start#authentication) - ","category":"network","line_end":1017,"severity":"low","line_start":1017},{"id":"network:SKILL.md:1018:hardcoded-url","file":"SKILL.md","pattern":"Hardcoded URL","snippet":"- [Webhooks Documentation](https://huggingface.co/docs/huggingface_hub/guides/webhooks) - Event trig","category":"network","line_end":1018,"severity":"low","line_start":1018},{"id":"filesystem:SKILL.md:373:path-traversal-sequence","file":"SKILL.md","pattern":"Path traversal sequence","snippet":"hf_jobs(\"uv\", {\"script\": \"https://huggingface.co/datasets/uv-scripts/.../raw/main/foo.py\"})","category":"filesystem","line_end":373,"severity":"high","line_start":373},{"id":"env_access:SKILL.md:176:python-environment-access","file":"SKILL.md","pattern":"Python environment access","snippet":"token = os.environ.get(\"HF_TOKEN\")","category":"env_access","line_end":176,"severity":"low","line_start":176},{"id":"env_access:SKILL.md:187:python-environment-access","file":"SKILL.md","pattern":"Python environment access","snippet":"- Use `os.environ.get(\"HF_TOKEN\")` to access","category":"env_access","line_end":187,"severity":"low","line_start":187},{"id":"env_access:SKILL.md:202:python-environment-access","file":"SKILL.md","pattern":"Python environment access","snippet":"assert \"HF_TOKEN\" in os.environ, \"HF_TOKEN not found!\"","category":"env_access","line_end":202,"severity":"low","line_start":202},{"id":"env_access:SKILL.md:203:python-environment-access","file":"SKILL.md","pattern":"Python environment access","snippet":"token = os.environ[\"HF_TOKEN\"]","category":"env_access","line_end":203,"severity":"low","line_start":203},{"id":"env_access:SKILL.md:222:python-environment-access","file":"SKILL.md","pattern":"Python environment access","snippet":"- **Verify:** Script checks `os.environ.get(\"HF_TOKEN\")`","category":"env_access","line_end":222,"severity":"low","line_start":222},{"id":"env_access:SKILL.md:253:python-environment-access","file":"SKILL.md","pattern":"Python environment access","snippet":"assert \"HF_TOKEN\" in os.environ, \"HF_TOKEN required!\"","category":"env_access","line_end":253,"severity":"low","line_start":253},{"id":"env_access:SKILL.md:256:python-environment-access","file":"SKILL.md","pattern":"Python environment access","snippet":"api = HfApi(token=os.environ[\"HF_TOKEN\"])","category":"env_access","line_end":256,"severity":"low","line_start":256},{"id":"env_access:SKILL.md:261:python-environment-access","file":"SKILL.md","pattern":"Python environment access","snippet":"dataset.push_to_hub(\"username/my-dataset\", token=os.environ[\"HF_TOKEN\"])","category":"env_access","line_end":261,"severity":"low","line_start":261},{"id":"env_access:SKILL.md:510:python-environment-access","file":"SKILL.md","pattern":"Python environment access","snippet":"model.push_to_hub(\"username/model-name\", token=os.environ[\"HF_TOKEN\"])","category":"env_access","line_end":510,"severity":"low","line_start":510},{"id":"env_access:SKILL.md:513:python-environment-access","file":"SKILL.md","pattern":"Python environment access","snippet":"dataset.push_to_hub(\"username/dataset-name\", token=os.environ[\"HF_TOKEN\"])","category":"env_access","line_end":513,"severity":"low","line_start":513},{"id":"env_access:SKILL.md:520:python-environment-access","file":"SKILL.md","pattern":"Python environment access","snippet":"token=os.environ[\"HF_TOKEN\"]","category":"env_access","line_end":520,"severity":"low","line_start":520},{"id":"env_access:SKILL.md:559:python-environment-access","file":"SKILL.md","pattern":"Python environment access","snippet":"api = HfApi(token=os.environ.get(\"HF_TOKEN\"))","category":"env_access","line_end":559,"severity":"low","line_start":559},{"id":"env_access:SKILL.md:833:python-environment-access","file":"SKILL.md","pattern":"Python environment access","snippet":"secret=os.environ[\"HF_WEBHOOK_SECRET\"]","category":"env_access","line_end":833,"severity":"low","line_start":833},{"id":"env_access:SKILL.md:853:python-environment-access","file":"SKILL.md","pattern":"Python environment access","snippet":"payload = json.loads(os.environ.get(\"WEBHOOK_PAYLOAD\", \"{}\"))","category":"env_access","line_end":853,"severity":"low","line_start":853},{"id":"env_access:SKILL.md:960:python-environment-access","file":"SKILL.md","pattern":"Python environment access","snippet":"2. Verify token in script: `assert \"HF_TOKEN\" in os.environ`","category":"env_access","line_end":960,"severity":"low","line_start":960},{"id":"blocker:SKILL.md:54:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"- Hugging Face Account with [Pro](https://hf.co/pro), [Team](https://hf.co/enterprise), or [Enterpri","category":"blocker","line_end":54,"severity":"low","line_start":54},{"id":"blocker:SKILL.md:55:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"- Authenticated login: Check with `hf_whoami()`","category":"blocker","line_end":55,"severity":"low","line_start":55},{"id":"blocker:SKILL.md:77:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"**⚠️ CRITICAL:** The `$HF_TOKEN` placeholder is ONLY auto-replaced by the `hf_jobs` MCP tool. When u","category":"blocker","line_end":77,"severity":"low","line_start":77},{"id":"blocker:SKILL.md:195:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"from huggingface_hub import whoami","category":"blocker","line_end":195,"severity":"low","line_start":195},{"id":"blocker:SKILL.md:196:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"user_info = whoami()  # Returns your username if authenticated","category":"blocker","line_end":196,"severity":"low","line_start":196},{"id":"blocker:SKILL.md:210:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"- **Cause:** Token missing or invalid","category":"blocker","line_end":211,"severity":"low","line_start":210},{"id":"blocker:SKILL.md:212:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"- **Verify:** Check `hf_whoami()` works locally","category":"blocker","line_end":212,"severity":"low","line_start":212},{"id":"blocker:SKILL.md:696:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"**Remember:** Wait for user to request status checks. Avoid polling repeatedly.","category":"blocker","line_end":696,"severity":"low","line_start":696},{"id":"blocker:SKILL.md:702:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"https://huggingface.co/jobs/username/job-id","category":"blocker","line_end":703,"severity":"low","line_start":702},{"id":"blocker:SKILL.md:977:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"1. Check `hf_whoami()` works locally","category":"blocker","line_end":977,"severity":"low","line_start":977},{"id":"blocker:SKILL.md:187:network-reconnaissance","file":"SKILL.md","pattern":"Network reconnaissance","snippet":"- Use `os.environ.get(\"HF_TOKEN\")` to access","category":"blocker","line_end":188,"severity":"low","line_start":187},{"id":"blocker:SKILL.md:226:network-reconnaissance","file":"SKILL.md","pattern":"Network reconnaissance","snippet":"- **Fix:** Use token from account with access","category":"blocker","line_end":227,"severity":"low","line_start":226}],"finding_verdicts":[{"id":"blocker:index.html:44:system-reconnaissance","reason":"The match is a CSS border color declaration in a static page. It performs no system or network inspection.","verdict":"false_positive","confidence":0.98},{"id":"blocker:index.html:56:system-reconnaissance","reason":"The match is a CSS border color declaration in a static page. It performs no system or network inspection.","verdict":"false_positive","confidence":0.98},{"id":"blocker:index.html:71:system-reconnaissance","reason":"The match is a CSS border color declaration in a static page. It performs no system or network inspection.","verdict":"false_positive","confidence":0.98},{"id":"network:references/hub_saving.md:65:python-http-libraries","reason":"This is an opt-in example that posts caller-selected results to a placeholder API. It has no hidden destination and is not executed automatically.","verdict":"false_positive","confidence":0.98},{"id":"network:references/hub_saving.md:65:hardcoded-url","reason":"This is an opt-in example using a clearly marked placeholder endpoint. The skill does not contact that endpoint automatically.","verdict":"false_positive","confidence":0.94},{"id":"filesystem:references/hub_saving.md:184:python-file-write-append","reason":"This documented persistence example writes results.json at a fixed relative path. It uses no attacker-controlled path and performs no traversal.","verdict":"false_positive","confidence":0.98},{"id":"env_access:references/hub_saving.md:22:python-environment-access","reason":"The code accesses the named HF_TOKEN only for explicit Hugging Face authentication and does not log or send it to an unrelated destination.","verdict":"false_positive","confidence":0.94},{"id":"env_access:references/hub_saving.md:28:python-environment-access","reason":"The code accesses the named HF_TOKEN only for explicit Hugging Face authentication and does not log or send it to an unrelated destination.","verdict":"false_positive","confidence":0.94},{"id":"env_access:references/hub_saving.md:34:python-environment-access","reason":"The code accesses the named HF_TOKEN only for explicit Hugging Face authentication and does not log or send it to an unrelated destination.","verdict":"false_positive","confidence":0.94},{"id":"env_access:references/hub_saving.md:85:python-environment-access","reason":"The code accesses the named HF_TOKEN only for explicit Hugging Face authentication and does not log or send it to an unrelated destination.","verdict":"false_positive","confidence":0.94},{"id":"env_access:references/hub_saving.md:96:python-environment-access","reason":"The code accesses the named HF_TOKEN only for explicit Hugging Face authentication and does not log or send it to an unrelated destination.","verdict":"false_positive","confidence":0.94},{"id":"env_access:references/hub_saving.md:115:python-environment-access","reason":"The code accesses the named HF_TOKEN only for explicit Hugging Face authentication and does not log or send it to an unrelated destination.","verdict":"false_positive","confidence":0.94},{"id":"env_access:references/hub_saving.md:144:python-environment-access","reason":"The code accesses the named HF_TOKEN only for explicit Hugging Face authentication and does not log or send it to an unrelated destination.","verdict":"false_positive","confidence":0.94},{"id":"env_access:references/hub_saving.md:177:python-environment-access","reason":"The code accesses the named HF_TOKEN only for explicit Hugging Face authentication and does not log or send it to an unrelated destination.","verdict":"false_positive","confidence":0.94},{"id":"env_access:references/hub_saving.md:233:python-environment-access","reason":"The code accesses the named HF_TOKEN only for explicit Hugging Face authentication and does not log or send it to an unrelated destination.","verdict":"false_positive","confidence":0.94},{"id":"blocker:references/hub_saving.md:261:system-reconnaissance","reason":"The matched text is documentation, an identifier, authentication validation, or ordinary status handling. It does not enumerate the host or scan a network.","verdict":"false_positive","confidence":0.98},{"id":"blocker:references/hub_saving.md:266:system-reconnaissance","reason":"The matched text is documentation, an identifier, authentication validation, or ordinary status handling. It does not enumerate the host or scan a network.","verdict":"false_positive","confidence":0.98},{"id":"blocker:references/hub_saving.md:275:system-reconnaissance","reason":"The matched text is documentation, an identifier, authentication validation, or ordinary status handling. It does not enumerate the host or scan a network.","verdict":"false_positive","confidence":0.98},{"id":"blocker:references/hub_saving.md:279:system-reconnaissance","reason":"The matched text is documentation, an identifier, authentication validation, or ordinary status handling. It does not enumerate the host or scan a network.","verdict":"false_positive","confidence":0.98},{"id":"blocker:references/hub_saving.md:306:system-reconnaissance","reason":"The matched text is documentation, an identifier, authentication validation, or ordinary status handling. It does not enumerate the host or scan a network.","verdict":"false_positive","confidence":0.98},{"id":"network:references/token_usage.md:243:hardcoded-url","reason":"The URL is documentation, API error text, or a generated Hugging Face resource link. It is not fetched as executable code at this location.","verdict":"false_positive","confidence":0.94},{"id":"network:references/token_usage.md:268:hardcoded-url","reason":"The URL is documentation, API error text, or a generated Hugging Face resource link. It is not fetched as executable code at this location.","verdict":"false_positive","confidence":0.94},{"id":"env_access:references/token_usage.md:132:python-environment-access","reason":"The code accesses the named HF_TOKEN only for explicit Hugging Face authentication and does not log or send it to an unrelated destination.","verdict":"false_positive","confidence":0.94},{"id":"env_access:references/token_usage.md:145:python-environment-access","reason":"The code accesses the named HF_TOKEN only for explicit Hugging Face authentication and does not log or send it to an unrelated destination.","verdict":"false_positive","confidence":0.94},{"id":"env_access:references/token_usage.md:184:python-environment-access","reason":"The code accesses the named HF_TOKEN only for explicit Hugging Face authentication and does not log or send it to an unrelated destination.","verdict":"false_positive","confidence":0.94},{"id":"env_access:references/token_usage.md:219:python-environment-access","reason":"The code accesses the named HF_TOKEN only for explicit Hugging Face authentication and does not log or send it to an unrelated destination.","verdict":"false_positive","confidence":0.94},{"id":"env_access:references/token_usage.md:222:python-environment-access","reason":"The code accesses the named HF_TOKEN only for explicit Hugging Face authentication and does not log or send it to an unrelated destination.","verdict":"false_positive","confidence":0.94},{"id":"env_access:references/token_usage.md:261:python-environment-access","reason":"The code accesses the named HF_TOKEN only for explicit Hugging Face authentication and does not log or send it to an unrelated destination.","verdict":"false_positive","confidence":0.94},{"id":"env_access:references/token_usage.md:375:python-environment-access","reason":"The code accesses the named HF_TOKEN only for explicit Hugging Face authentication and does not log or send it to an unrelated destination.","verdict":"false_positive","confidence":0.94},{"id":"env_access:references/token_usage.md:455:python-environment-access","reason":"The code accesses the named HF_TOKEN only for explicit Hugging Face authentication and does not log or send it to an unrelated destination.","verdict":"false_positive","confidence":0.94},{"id":"env_access:references/token_usage.md:484:python-environment-access","reason":"The code accesses the named HF_TOKEN only for explicit Hugging Face authentication and does not log or send it to an unrelated destination.","verdict":"false_positive","confidence":0.94},{"id":"env_access:references/token_usage.md:510:python-environment-access","reason":"The code accesses the named HF_TOKEN only for explicit Hugging Face authentication and does not log or send it to an unrelated destination.","verdict":"false_positive","confidence":0.94},{"id":"env_access:references/token_usage.md:534:python-environment-access","reason":"The code accesses the named HF_TOKEN only for explicit Hugging Face authentication and does not log or send it to an unrelated destination.","verdict":"false_positive","confidence":0.94},{"id":"env_access:references/token_usage.md:552:python-environment-access","reason":"The code accesses the named HF_TOKEN only for explicit Hugging Face authentication and does not log or send it to an unrelated destination.","verdict":"false_positive","confidence":0.94},{"id":"env_access:references/token_usage.md:558:python-environment-access","reason":"The code accesses the named HF_TOKEN only for explicit Hugging Face authentication and does not log or send it to an unrelated destination.","verdict":"false_positive","confidence":0.94},{"id":"blocker:references/token_usage.md:57:system-reconnaissance","reason":"The matched text is documentation, an identifier, authentication validation, or ordinary status handling. It does not enumerate the host or scan a network.","verdict":"false_positive","confidence":0.98},{"id":"blocker:references/token_usage.md:80:system-reconnaissance","reason":"The matched text is documentation, an identifier, authentication validation, or ordinary status handling. It does not enumerate the host or scan a network.","verdict":"false_positive","confidence":0.98},{"id":"blocker:references/token_usage.md:204:system-reconnaissance","reason":"The matched text is documentation, an identifier, authentication validation, or ordinary status handling. It does not enumerate the host or scan a network.","verdict":"false_positive","confidence":0.98},{"id":"blocker:references/token_usage.md:207:system-reconnaissance","reason":"The matched text is documentation, an identifier, authentication validation, or ordinary status handling. It does not enumerate the host or scan a network.","verdict":"false_positive","confidence":0.98},{"id":"blocker:references/token_usage.md:226:system-reconnaissance","reason":"The matched text is documentation, an identifier, authentication validation, or ordinary status handling. It does not enumerate the host or scan a network.","verdict":"false_positive","confidence":0.98},{"id":"blocker:references/token_usage.md:229:system-reconnaissance","reason":"The matched text is documentation, an identifier, authentication validation, or ordinary status handling. It does not enumerate the host or scan a network.","verdict":"false_positive","confidence":0.98},{"id":"blocker:references/token_usage.md:231:system-reconnaissance","reason":"The matched text is documentation, an identifier, authentication validation, or ordinary status handling. It does not enumerate the host or scan a network.","verdict":"false_positive","confidence":0.98},{"id":"blocker:references/token_usage.md:232:system-reconnaissance","reason":"The matched text is documentation, an identifier, authentication validation, or ordinary status handling. It does not enumerate the host or scan a network.","verdict":"false_positive","confidence":0.98},{"id":"blocker:references/token_usage.md:248:system-reconnaissance","reason":"The matched text is documentation, an identifier, authentication validation, or ordinary status handling. It does not enumerate the host or scan a network.","verdict":"false_positive","confidence":0.98},{"id":"blocker:references/token_usage.md:253:system-reconnaissance","reason":"The matched text is documentation, an identifier, authentication validation, or ordinary status handling. It does not enumerate the host or scan a network.","verdict":"false_positive","confidence":0.98},{"id":"blocker:references/token_usage.md:284:system-reconnaissance","reason":"The matched text is documentation, an identifier, authentication validation, or ordinary status handling. It does not enumerate the host or scan a network.","verdict":"false_positive","confidence":0.98},{"id":"blocker:references/token_usage.md:286:system-reconnaissance","reason":"The matched text is documentation, an identifier, authentication validation, or ordinary status handling. It does not enumerate the host or scan a network.","verdict":"false_positive","confidence":0.98},{"id":"blocker:references/token_usage.md:536:system-reconnaissance","reason":"The matched text is documentation, an identifier, authentication validation, or ordinary status handling. It does not enumerate the host or scan a network.","verdict":"false_positive","confidence":0.98},{"id":"network:references/troubleshooting.md:11:hardcoded-url","reason":"The URL is documentation, API error text, or a generated Hugging Face resource link. It is not fetched as executable code at this location.","verdict":"false_positive","confidence":0.94},{"id":"network:references/troubleshooting.md:36:hardcoded-url","reason":"The URL is documentation, API error text, or a generated Hugging Face resource link. It is not fetched as executable code at this location.","verdict":"false_positive","confidence":0.94},{"id":"network:references/troubleshooting.md:190:hardcoded-url","reason":"The example executes a remote script from a mutable main branch without a commit pin or integrity check. Upstream changes could run arbitrary code inside a credentialed job.","verdict":"confirmed","severity":"high","confidence":0.94},{"id":"env_access:references/troubleshooting.md:29:python-environment-access","reason":"The code accesses the named HF_TOKEN only for explicit Hugging Face authentication and does not log or send it to an unrelated destination.","verdict":"false_positive","confidence":0.94},{"id":"env_access:references/troubleshooting.md:210:python-environment-access","reason":"The code accesses the named HF_TOKEN only for explicit Hugging Face authentication and does not log or send it to an unrelated destination.","verdict":"false_positive","confidence":0.94},{"id":"env_access:references/troubleshooting.md:372:python-environment-access","reason":"The code accesses the named HF_TOKEN only for explicit Hugging Face authentication and does not log or send it to an unrelated destination.","verdict":"false_positive","confidence":0.94},{"id":"env_access:references/troubleshooting.md:448:python-environment-access","reason":"The code accesses the named HF_TOKEN only for explicit Hugging Face authentication and does not log or send it to an unrelated destination.","verdict":"false_positive","confidence":0.94},{"id":"blocker:references/troubleshooting.md:16:system-reconnaissance","reason":"The matched text is documentation, an identifier, authentication validation, or ordinary status handling. It does not enumerate the host or scan a network.","verdict":"false_positive","confidence":0.98},{"id":"blocker:references/troubleshooting.md:21:system-reconnaissance","reason":"The matched text is documentation, an identifier, authentication validation, or ordinary status handling. It does not enumerate the host or scan a network.","verdict":"false_positive","confidence":0.98},{"id":"blocker:references/troubleshooting.md:205:system-reconnaissance","reason":"The matched text is documentation, an identifier, authentication validation, or ordinary status handling. It does not enumerate the host or scan a network.","verdict":"false_positive","confidence":0.98},{"id":"blocker:references/troubleshooting.md:474:system-reconnaissance","reason":"The matched text is documentation, an identifier, authentication validation, or ordinary status handling. It does not enumerate the host or scan a network.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:scripts/cot-self-instruct.py:430:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:scripts/cot-self-instruct.py:44:shell-command-substitution","reason":"The example expands the local HF token into a command-line environment argument. The token can be exposed through process listings, shell tracing, or copied command output.","verdict":"confirmed","severity":"high","confidence":0.97},{"id":"external_commands:scripts/cot-self-instruct.py:707:shell-command-substitution","reason":"The example expands the local HF token into a command-line environment argument. The token can be exposed through process listings, shell tracing, or copied command output.","verdict":"confirmed","severity":"high","confidence":0.97},{"id":"network:scripts/cot-self-instruct.py:45:hardcoded-url","reason":"The example executes a remote script from a mutable main branch without a commit pin or integrity check. Upstream changes could run arbitrary code inside a credentialed job.","verdict":"confirmed","severity":"high","confidence":0.94},{"id":"network:scripts/cot-self-instruct.py:407:hardcoded-url","reason":"The URL is documentation, API error text, or a generated Hugging Face resource link. It is not fetched as executable code at this location.","verdict":"false_positive","confidence":0.94},{"id":"network:scripts/cot-self-instruct.py:408:hardcoded-url","reason":"The URL is documentation, API error text, or a generated Hugging Face resource link. It is not fetched as executable code at this location.","verdict":"false_positive","confidence":0.94},{"id":"network:scripts/cot-self-instruct.py:427:hardcoded-url","reason":"The URL is documentation, API error text, or a generated Hugging Face resource link. It is not fetched as executable code at this location.","verdict":"false_positive","confidence":0.94},{"id":"network:scripts/cot-self-instruct.py:431:hardcoded-url","reason":"The example executes a remote script from a mutable main branch without a commit pin or integrity check. Upstream changes could run arbitrary code inside a credentialed job.","verdict":"confirmed","severity":"high","confidence":0.94},{"id":"network:scripts/cot-self-instruct.py:700:hardcoded-url","reason":"The URL is documentation, API error text, or a generated Hugging Face resource link. It is not fetched as executable code at this location.","verdict":"false_positive","confidence":0.94},{"id":"network:scripts/cot-self-instruct.py:708:hardcoded-url","reason":"The example executes a remote script from a mutable main branch without a commit pin or integrity check. Upstream changes could run arbitrary code inside a credentialed job.","verdict":"confirmed","severity":"high","confidence":0.94},{"id":"env_access:scripts/cot-self-instruct.py:70:python-environment-access","reason":"This sets or checks a documented Hugging Face performance flag. It does not read or disclose a credential.","verdict":"false_positive","confidence":0.94},{"id":"env_access:scripts/cot-self-instruct.py:572:python-environment-access","reason":"The code accesses the named HF_TOKEN only for explicit Hugging Face authentication and does not log or send it to an unrelated destination.","verdict":"false_positive","confidence":0.94},{"id":"sensitive:scripts/cot-self-instruct.py:222:certificate-key-files","reason":"The detector matched the dictionary method keys(), not a certificate or private-key path. No key file is read or written.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:scripts/finepdfs-stats.py:240:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:scripts/finepdfs-stats.py:242:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:scripts/finepdfs-stats.py:270:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:scripts/finepdfs-stats.py:271:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:scripts/finepdfs-stats.py:275:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"network:scripts/finepdfs-stats.py:34:hardcoded-url","reason":"The example executes a remote script from a mutable main branch without a commit pin or integrity check. Upstream changes could run arbitrary code inside a credentialed job.","verdict":"confirmed","severity":"high","confidence":0.94},{"id":"network:scripts/finepdfs-stats.py:276:hardcoded-url","reason":"The example executes a remote script from a mutable main branch without a commit pin or integrity check. Upstream changes could run arbitrary code inside a credentialed job.","verdict":"confirmed","severity":"high","confidence":0.94},{"id":"network:scripts/finepdfs-stats.py:282:hardcoded-url","reason":"The URL is documentation, API error text, or a generated Hugging Face resource link. It is not fetched as executable code at this location.","verdict":"false_positive","confidence":0.94},{"id":"network:scripts/finepdfs-stats.py:283:hardcoded-url","reason":"The URL is documentation, API error text, or a generated Hugging Face resource link. It is not fetched as executable code at this location.","verdict":"false_positive","confidence":0.94},{"id":"network:scripts/finepdfs-stats.py:527:hardcoded-url","reason":"The URL is documentation, API error text, or a generated Hugging Face resource link. It is not fetched as executable code at this location.","verdict":"false_positive","confidence":0.94},{"id":"network:scripts/finepdfs-stats.py:554:hardcoded-url","reason":"The example executes a remote script from a mutable main branch without a commit pin or integrity check. Upstream changes could run arbitrary code inside a credentialed job.","verdict":"confirmed","severity":"high","confidence":0.94},{"id":"env_access:scripts/finepdfs-stats.py:360:python-environment-access","reason":"This sets or checks a documented Hugging Face performance flag. It does not read or disclose a credential.","verdict":"false_positive","confidence":0.94},{"id":"env_access:scripts/finepdfs-stats.py:483:python-environment-access","reason":"The code accesses the named HF_TOKEN only for explicit Hugging Face authentication and does not log or send it to an unrelated destination.","verdict":"false_positive","confidence":0.94},{"id":"sensitive:scripts/finepdfs-stats.py:101:certificate-key-files","reason":"The detector matched the dictionary method keys(), not a certificate or private-key path. No key file is read or written.","verdict":"false_positive","confidence":0.98},{"id":"blocker:scripts/finepdfs-stats.py:513:system-reconnaissance","reason":"The matched text is documentation, an identifier, authentication validation, or ordinary status handling. It does not enumerate the host or scan a network.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:scripts/generate-responses.py:124:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:scripts/generate-responses.py:146:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:scripts/generate-responses.py:154:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"network:scripts/generate-responses.py:119:hardcoded-url","reason":"The URL is documentation, API error text, or a generated Hugging Face resource link. It is not fetched as executable code at this location.","verdict":"false_positive","confidence":0.94},{"id":"network:scripts/generate-responses.py:123:hardcoded-url","reason":"The URL is documentation, API error text, or a generated Hugging Face resource link. It is not fetched as executable code at this location.","verdict":"false_positive","confidence":0.94},{"id":"network:scripts/generate-responses.py:125:hardcoded-url","reason":"The URL is documentation, API error text, or a generated Hugging Face resource link. It is not fetched as executable code at this location.","verdict":"false_positive","confidence":0.94},{"id":"network:scripts/generate-responses.py:150:hardcoded-url","reason":"The URL is documentation, API error text, or a generated Hugging Face resource link. It is not fetched as executable code at this location.","verdict":"false_positive","confidence":0.94},{"id":"network:scripts/generate-responses.py:155:hardcoded-url","reason":"The example executes a remote script from a mutable main branch without a commit pin or integrity check. Upstream changes could run arbitrary code inside a credentialed job.","verdict":"confirmed","severity":"high","confidence":0.94},{"id":"network:scripts/generate-responses.py:410:hardcoded-url","reason":"The URL is documentation, API error text, or a generated Hugging Face resource link. It is not fetched as executable code at this location.","verdict":"false_positive","confidence":0.94},{"id":"network:scripts/generate-responses.py:580:hardcoded-url","reason":"The example executes a remote script from a mutable main branch without a commit pin or integrity check. Upstream changes could run arbitrary code inside a credentialed job.","verdict":"confirmed","severity":"high","confidence":0.94},{"id":"env_access:scripts/generate-responses.py:56:python-environment-access","reason":"This sets or checks a documented Hugging Face performance flag. It does not read or disclose a credential.","verdict":"false_positive","confidence":0.94},{"id":"env_access:scripts/generate-responses.py:228:python-environment-access","reason":"The code accesses the named HF_TOKEN only for explicit Hugging Face authentication and does not log or send it to an unrelated destination.","verdict":"false_positive","confidence":0.94},{"id":"blocker:scripts/generate-responses.py:32:system-reconnaissance","reason":"The matched text is documentation, an identifier, authentication validation, or ordinary status handling. It does not enumerate the host or scan a network.","verdict":"false_positive","confidence":0.98},{"id":"blocker:scripts/generate-responses.py:158:system-reconnaissance","reason":"The matched text is documentation, an identifier, authentication validation, or ordinary status handling. It does not enumerate the host or scan a network.","verdict":"false_positive","confidence":0.98},{"id":"blocker:scripts/generate-responses.py:363:system-reconnaissance","reason":"The matched text is documentation, an identifier, authentication validation, or ordinary status handling. It does not enumerate the host or scan a network.","verdict":"false_positive","confidence":0.98},{"id":"blocker:scripts/generate-responses.py:367:system-reconnaissance","reason":"The matched text is documentation, an identifier, authentication validation, or ordinary status handling. It does not enumerate the host or scan a network.","verdict":"false_positive","confidence":0.98},{"id":"blocker:scripts/generate-responses.py:426:system-reconnaissance","reason":"The matched text is documentation, an identifier, authentication validation, or ordinary status handling. It does not enumerate the host or scan a network.","verdict":"false_positive","confidence":0.98},{"id":"blocker:scripts/generate-responses.py:584:system-reconnaissance","reason":"The matched text is documentation, an identifier, authentication validation, or ordinary status handling. It does not enumerate the host or scan a network.","verdict":"false_positive","confidence":0.98},{"id":"scripts:SKILL.md:793:dynamic-import-expression","reason":"This is a normal parenthesized import statement in a documented Python example. It does not construct a module name or load code dynamically.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:19:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:24:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:41:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:43:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:55:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:68:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:75:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:77:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:86:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:111:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:116:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:119:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:120:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:132:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:137:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:151:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:156:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:159:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:160:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:161:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:167:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:183:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:187:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:188:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:194:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:197:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:200:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:205:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:211:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:212:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:220:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:221:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:222:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:231:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:240:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:269:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:278:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:296:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:299:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:301:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:304:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:307:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:311:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:315:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:317:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:323:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:326:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:328:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:336:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:342:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:345:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:348:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:354:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:355:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:357:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:359:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:362:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:364:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:366:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:377:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:381:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:383:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:389:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:395:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:398:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:401:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:408:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:415:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:418:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:420:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:423:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:426:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:432:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:439:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:444:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:450:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:453:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:455:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:459:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:461:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:467:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:477:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:478:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:479:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:480:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:481:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:482:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:483:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:484:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:487:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:488:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:489:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:496:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:508:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:522:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:526:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:531:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:535:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:539:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:544:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:551:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:554:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:563:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:569:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:573:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:584:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:588:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:591:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:592:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:593:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:596:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:601:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:621:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:623:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:654:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:666:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:669:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:687:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:690:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:694:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:701:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:703:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:709:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:720:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:727:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:749:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:752:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:771:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:774:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:775:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:776:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:777:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:778:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:779:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:782:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:789:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:792:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:815:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:822:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:835:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:839:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:849:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:855:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:861:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:863:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:865:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:869:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:888:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:890:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:896:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:913:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:915:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:919:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:921:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:937:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:952:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:959:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:960:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:968:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:972:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:977:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:978:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:979:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:991:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:996:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:997:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:998:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:999:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:1002:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:1003:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:1004:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:1022:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:1026:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:1028:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:1037:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:1038:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:1039:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:1040:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:1041:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:1042:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:1043:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:1044:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:1045:ruby-shell-backtick-execution","reason":"The matched backticks format Markdown or text embedded in documentation and Python strings. No shell interpreter is invoked at this location.","verdict":"false_positive","confidence":0.98},{"id":"network:SKILL.md:538:python-http-libraries","reason":"This is an opt-in example that posts caller-selected results to a placeholder API. It has no hidden destination and is not executed automatically.","verdict":"false_positive","confidence":0.98},{"id":"network:SKILL.md:2:hardcoded-url","reason":"The URL is documentation, API error text, or a generated Hugging Face resource link. It is not fetched as executable code at this location.","verdict":"false_positive","confidence":0.94},{"id":"network:SKILL.md:54:hardcoded-url","reason":"The URL is documentation, API error text, or a generated Hugging Face resource link. It is not fetched as executable code at this location.","verdict":"false_positive","confidence":0.94},{"id":"network:SKILL.md:217:hardcoded-url","reason":"The URL is documentation, API error text, or a generated Hugging Face resource link. It is not fetched as executable code at this location.","verdict":"false_positive","confidence":0.94},{"id":"network:SKILL.md:373:hardcoded-url","reason":"The example executes a remote script from a mutable main branch without a commit pin or integrity check. Upstream changes could run arbitrary code inside a credentialed job.","verdict":"confirmed","severity":"high","confidence":0.94},{"id":"network:SKILL.md:376:hardcoded-url","reason":"The example executes a remote script from a mutable main branch without a commit pin or integrity check. Upstream changes could run arbitrary code inside a credentialed job.","verdict":"confirmed","severity":"high","confidence":0.94},{"id":"network:SKILL.md:473:hardcoded-url","reason":"The URL is documentation, API error text, or a generated Hugging Face resource link. It is not fetched as executable code at this location.","verdict":"false_positive","confidence":0.94},{"id":"network:SKILL.md:538:hardcoded-url","reason":"This is an opt-in example using a clearly marked placeholder endpoint. The skill does not contact that endpoint automatically.","verdict":"false_positive","confidence":0.94},{"id":"network:SKILL.md:702:hardcoded-url","reason":"The URL is documentation, API error text, or a generated Hugging Face resource link. It is not fetched as executable code at this location.","verdict":"false_positive","confidence":0.94},{"id":"network:SKILL.md:857:hardcoded-url","reason":"The URL is documentation, API error text, or a generated Hugging Face resource link. It is not fetched as executable code at this location.","verdict":"false_positive","confidence":0.94},{"id":"network:SKILL.md:1009:hardcoded-url","reason":"The URL is documentation, API error text, or a generated Hugging Face resource link. It is not fetched as executable code at this location.","verdict":"false_positive","confidence":0.94},{"id":"network:SKILL.md:1010:hardcoded-url","reason":"The URL is documentation, API error text, or a generated Hugging Face resource link. It is not fetched as executable code at this location.","verdict":"false_positive","confidence":0.94},{"id":"network:SKILL.md:1011:hardcoded-url","reason":"The URL is documentation, API error text, or a generated Hugging Face resource link. It is not fetched as executable code at this location.","verdict":"false_positive","confidence":0.94},{"id":"network:SKILL.md:1012:hardcoded-url","reason":"The URL is documentation, API error text, or a generated Hugging Face resource link. It is not fetched as executable code at this location.","verdict":"false_positive","confidence":0.94},{"id":"network:SKILL.md:1015:hardcoded-url","reason":"The URL is documentation, API error text, or a generated Hugging Face resource link. It is not fetched as executable code at this location.","verdict":"false_positive","confidence":0.94},{"id":"network:SKILL.md:1016:hardcoded-url","reason":"The URL is documentation, API error text, or a generated Hugging Face resource link. It is not fetched as executable code at this location.","verdict":"false_positive","confidence":0.94},{"id":"network:SKILL.md:1017:hardcoded-url","reason":"The URL is documentation, API error text, or a generated Hugging Face resource link. It is not fetched as executable code at this location.","verdict":"false_positive","confidence":0.94},{"id":"network:SKILL.md:1018:hardcoded-url","reason":"The URL is documentation, API error text, or a generated Hugging Face resource link. It is not fetched as executable code at this location.","verdict":"false_positive","confidence":0.94},{"id":"filesystem:SKILL.md:373:path-traversal-sequence","reason":"The three dots are a placeholder inside an HTTPS example URL. They are not a filesystem traversal sequence and no local path is accessed.","verdict":"false_positive","confidence":0.98},{"id":"env_access:SKILL.md:176:python-environment-access","reason":"The code accesses the named HF_TOKEN only for explicit Hugging Face authentication and does not log or send it to an unrelated destination.","verdict":"false_positive","confidence":0.94},{"id":"env_access:SKILL.md:187:python-environment-access","reason":"The code accesses the named HF_TOKEN only for explicit Hugging Face authentication and does not log or send it to an unrelated destination.","verdict":"false_positive","confidence":0.94},{"id":"env_access:SKILL.md:202:python-environment-access","reason":"The code accesses the named HF_TOKEN only for explicit Hugging Face authentication and does not log or send it to an unrelated destination.","verdict":"false_positive","confidence":0.94},{"id":"env_access:SKILL.md:203:python-environment-access","reason":"The code accesses the named HF_TOKEN only for explicit Hugging Face authentication and does not log or send it to an unrelated destination.","verdict":"false_positive","confidence":0.94},{"id":"env_access:SKILL.md:222:python-environment-access","reason":"The code accesses the named HF_TOKEN only for explicit Hugging Face authentication and does not log or send it to an unrelated destination.","verdict":"false_positive","confidence":0.94},{"id":"env_access:SKILL.md:253:python-environment-access","reason":"The code accesses the named HF_TOKEN only for explicit Hugging Face authentication and does not log or send it to an unrelated destination.","verdict":"false_positive","confidence":0.94},{"id":"env_access:SKILL.md:256:python-environment-access","reason":"The code accesses the named HF_TOKEN only for explicit Hugging Face authentication and does not log or send it to an unrelated destination.","verdict":"false_positive","confidence":0.94},{"id":"env_access:SKILL.md:261:python-environment-access","reason":"The code accesses the named HF_TOKEN only for explicit Hugging Face authentication and does not log or send it to an unrelated destination.","verdict":"false_positive","confidence":0.94},{"id":"env_access:SKILL.md:510:python-environment-access","reason":"The code accesses the named HF_TOKEN only for explicit Hugging Face authentication and does not log or send it to an unrelated destination.","verdict":"false_positive","confidence":0.94},{"id":"env_access:SKILL.md:513:python-environment-access","reason":"The code accesses the named HF_TOKEN only for explicit Hugging Face authentication and does not log or send it to an unrelated destination.","verdict":"false_positive","confidence":0.94},{"id":"env_access:SKILL.md:520:python-environment-access","reason":"The code accesses the named HF_TOKEN only for explicit Hugging Face authentication and does not log or send it to an unrelated destination.","verdict":"false_positive","confidence":0.94},{"id":"env_access:SKILL.md:559:python-environment-access","reason":"The code accesses the named HF_TOKEN only for explicit Hugging Face authentication and does not log or send it to an unrelated destination.","verdict":"false_positive","confidence":0.94},{"id":"env_access:SKILL.md:833:python-environment-access","reason":"The code accesses the named HF_TOKEN only for explicit Hugging Face authentication and does not log or send it to an unrelated destination.","verdict":"false_positive","confidence":0.94},{"id":"env_access:SKILL.md:853:python-environment-access","reason":"The code accesses the named HF_TOKEN only for explicit Hugging Face authentication and does not log or send it to an unrelated destination.","verdict":"false_positive","confidence":0.94},{"id":"env_access:SKILL.md:960:python-environment-access","reason":"The code accesses the named HF_TOKEN only for explicit Hugging Face authentication and does not log or send it to an unrelated destination.","verdict":"false_positive","confidence":0.94},{"id":"blocker:SKILL.md:54:system-reconnaissance","reason":"The matched text is documentation, an identifier, authentication validation, or ordinary status handling. It does not enumerate the host or scan a network.","verdict":"false_positive","confidence":0.98},{"id":"blocker:SKILL.md:55:system-reconnaissance","reason":"The matched text is documentation, an identifier, authentication validation, or ordinary status handling. It does not enumerate the host or scan a network.","verdict":"false_positive","confidence":0.98},{"id":"blocker:SKILL.md:77:system-reconnaissance","reason":"The matched text is documentation, an identifier, authentication validation, or ordinary status handling. It does not enumerate the host or scan a network.","verdict":"false_positive","confidence":0.98},{"id":"blocker:SKILL.md:195:system-reconnaissance","reason":"The matched text is documentation, an identifier, authentication validation, or ordinary status handling. It does not enumerate the host or scan a network.","verdict":"false_positive","confidence":0.98},{"id":"blocker:SKILL.md:196:system-reconnaissance","reason":"The matched text is documentation, an identifier, authentication validation, or ordinary status handling. It does not enumerate the host or scan a network.","verdict":"false_positive","confidence":0.98},{"id":"blocker:SKILL.md:210:system-reconnaissance","reason":"The matched text is documentation, an identifier, authentication validation, or ordinary status handling. It does not enumerate the host or scan a network.","verdict":"false_positive","confidence":0.98},{"id":"blocker:SKILL.md:212:system-reconnaissance","reason":"The matched text is documentation, an identifier, authentication validation, or ordinary status handling. It does not enumerate the host or scan a network.","verdict":"false_positive","confidence":0.98},{"id":"blocker:SKILL.md:696:system-reconnaissance","reason":"The matched text is documentation, an identifier, authentication validation, or ordinary status handling. It does not enumerate the host or scan a network.","verdict":"false_positive","confidence":0.98},{"id":"blocker:SKILL.md:702:system-reconnaissance","reason":"The matched text is documentation, an identifier, authentication validation, or ordinary status handling. It does not enumerate the host or scan a network.","verdict":"false_positive","confidence":0.98},{"id":"blocker:SKILL.md:977:system-reconnaissance","reason":"The matched text is documentation, an identifier, authentication validation, or ordinary status handling. It does not enumerate the host or scan a network.","verdict":"false_positive","confidence":0.98},{"id":"blocker:SKILL.md:187:network-reconnaissance","reason":"The matched text is documentation, an identifier, authentication validation, or ordinary status handling. It does not enumerate the host or scan a network.","verdict":"false_positive","confidence":0.98},{"id":"blocker:SKILL.md:226:network-reconnaissance","reason":"The matched text is documentation, an identifier, authentication validation, or ordinary status handling. It does not enumerate the host or scan a network.","verdict":"false_positive","confidence":0.98}],"semantic_findings":[{"title":"Paid Job Submission Has No Confirmation Gate","severity":"medium","locations":[{"file":"SKILL.md","line_end":45,"line_start":41},{"file":"SKILL.md","line_end":640,"line_start":617},{"file":"SKILL.md","line_end":748,"line_start":724}],"confidence":0.95,"description":"The skill directs the agent to submit paid jobs before reporting cost details and also supports recurring schedules. It does not require final user approval before creating either workload.","confidence_reasoning":"The directive explicitly submits first and reports details afterward, while the documented examples show nonzero costs and recurring jobs."},{"title":"Unpinned Container Images Receive Credentials","severity":"high","locations":[{"file":"SKILL.md","line_end":321,"line_start":315},{"file":"scripts/cot-self-instruct.py","line_end":45,"line_start":41}],"confidence":0.94,"description":"Examples run mutable latest or implicit-latest container images. One command passes HF_TOKEN into that image, allowing a compromised future image to capture the credential.","confidence_reasoning":"The image references are visibly unpinned, and the script example places HF_TOKEN in the same container invocation."},{"title":"Secrets Accepted Through Command-Line Arguments","severity":"medium","locations":[{"file":"scripts/cot-self-instruct.py","line_end":551,"line_start":547},{"file":"scripts/generate-responses.py","line_end":530,"line_start":527},{"file":"scripts/finepdfs-stats.py","line_end":348,"line_start":345}],"confidence":0.96,"description":"All bundled scripts accept Hugging Face tokens as command-line values. Tokens supplied this way can remain in shell history or appear in process listings.","confidence_reasoning":"Each parser explicitly defines an hf-token option, a well-known credential exposure channel when users supply the value on a command line."}],"subject_marketplace_commit_sha":"88a8e9a07f4c54ab105c1c41b6267c287146b07b","subject_content_hash":"0541e209f66da587fb0308d596662f6e146eb3e27badf73836f9c363a8f59aa7","subject_tree_hash":"cf7d49ef3a70ed90cad79f57aa4ebe7673ac3c136a48fa1aa17610165b4004b1","subject_plugin_path":"skills/sickn33/hugging-face-jobs","audit_payload_hash":"00b96b3e016921dd0af2cd05839d2331","confirmed_risk_level":"high","scanner_version":"3.0.0","policy_version":"skillstore-security-audit-policy-v1","subject":{"marketplaceCommitSha":"88a8e9a07f4c54ab105c1c41b6267c287146b07b","contentHash":"0541e209f66da587fb0308d596662f6e146eb3e27badf73836f9c363a8f59aa7","treeHash":"cf7d49ef3a70ed90cad79f57aa4ebe7673ac3c136a48fa1aa17610165b4004b1","pluginPath":"skills/sickn33/hugging-face-jobs","auditPayloadHash":"00b96b3e016921dd0af2cd05839d2331"},"scannerVersion":"3.0.0","policyVersion":"skillstore-security-audit-policy-v1"},"auditTranslation":null,"localization":{"requestedLocale":"en","contentLocale":"en","availableLocales":["en"],"fallbackToEnglish":false},"attestation":{"availability":"issued","url":"/api/skills/sickn33-hugging-face-jobs/audits/5/attestation","status":"active"},"trust":{"publicState":"public","auditState":"complete","auditCurrentness":null,"confirmedRiskLevel":"high","confirmedFindingCount":3,"capabilityReviewCount":13,"needsReviewCount":0,"falsePositiveCount":0,"agentAutoInstallPolicy":"confirmation_required","manualInstallPolicy":"allowed","artifactSignatureState":"available","attestationState":"active","verificationState":"not_verified"},"isLatest":true}}