Skills hugging-face-cli
📦

hugging-face-cli

Content revision r2 Safe ⚙️ External commands🌐 Network access📁 Filesystem access

Manage Hugging Face Hub Resources with hf

Hugging Face Hub operations span many commands, resources, and safety considerations. This skill selects suitable `hf` workflows and explains their effects.

Supports: Claude Codex Code(CC)
🥉 79 Bronze

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request
Review the Skillstore skill "hugging-face-cli" from https://skillstore.io/skills/sickn33-hugging-face-cli.md and its manifest at https://skillstore.io/api/skills/sickn33-hugging-face-cli/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/sickn33-hugging-face-cli.md Signed manifest GET /api/skills/sickn33-hugging-face-cli/manifest Signed lockfile GET /api/skills/sickn33-hugging-face-cli/lockfile

Test it

Using "hugging-face-cli". Download a fixed GPT-2 revision into a project directory without replacing existing files.

Expected outcome:

Recommended workflow: verify the revision, review disk space, preview the download, then fetch it into the requested directory without forcing replacement.

Using "hugging-face-cli". Synchronize a local dataset folder to a private bucket and show planned changes first.

Expected outcome:

  • Start with a dry run that preserves remote-only files.
  • Review uploads, replacements, and exclusions before applying the saved plan.
  • Confirm the destination bucket and active account before execution.

Using "hugging-face-cli". Schedule a weekly GPU evaluation job with secrets and a controlled timeout.

Expected outcome:

The plan separates secrets from ordinary variables, checks hardware cost, defines the schedule and timeout, then verifies the created job.

Security Audit

Safe
v5 • 7/24/2026 Open versioned report

Review confirmed two medium network risks in the documented installers: each fetches a mutable remote script that is later executed after manual inspection. The remaining 187 findings are false positives caused by Markdown code spans, metadata links, controlled temporary-directory handling, and ordinary CLI documentation. No prompt injection, credential exfiltration, or malicious intent was found.

1
Files scanned
241
Lines analyzed
2
Review items
0
False positives ignored
Capability review items (2)

These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.

Medium
SKILL.md:18
Hardcoded URL
`tmpdir="$(mktemp -d)" && trap 'rm -rf "$tmpdir"' EXIT && curl -LsSf https://hf.co/cli/install.sh -o
The command downloads a mutable installer from hf.co and later executes it with bash. Manual review helps, but no version or checksum pins the executed content.
Medium
SKILL.md:223
Hardcoded URL
`tmpdir="$(mktemp -d)" && trap 'rm -rf "$tmpdir"' EXIT && curl -fsSL https://raw.githubusercontent.c
The command downloads install.sh from the mutable main branch on GitHub and later runs it. Manual review helps, but no commit or checksum pins the content.

Risk Factors

⚙️ External commands (50)
SKILL.md:3 SKILL.md:15 SKILL.md:18 SKILL.md:20 SKILL.md:22 SKILL.md:24 SKILL.md:28 SKILL.md:29 SKILL.md:30 SKILL.md:31 SKILL.md:32 SKILL.md:33 SKILL.md:34 SKILL.md:35 SKILL.md:37 SKILL.md:39 SKILL.md:40 SKILL.md:41 SKILL.md:42 SKILL.md:43 SKILL.md:44 SKILL.md:46 SKILL.md:48 SKILL.md:49 SKILL.md:50 SKILL.md:51 SKILL.md:52 SKILL.md:53 SKILL.md:54 SKILL.md:55 SKILL.md:57 SKILL.md:59 SKILL.md:60 SKILL.md:61 SKILL.md:62 SKILL.md:64 SKILL.md:66 SKILL.md:67 SKILL.md:68 SKILL.md:69 SKILL.md:70 SKILL.md:71 SKILL.md:72 SKILL.md:73 SKILL.md:75 SKILL.md:77 SKILL.md:78 SKILL.md:79 SKILL.md:80 SKILL.md:81
🌐 Network access (5)
SKILL.md:5 SKILL.md:10 SKILL.md:18 SKILL.md:220 SKILL.md:223
📁 Filesystem access (5)
SKILL.md:226 SKILL.md:227 SKILL.md:228 SKILL.md:18 SKILL.md:223
Audited by: codex View Audit History →
Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report
Security Assessment

Copy report link

https://skillstore.io/skills/sickn33-hugging-face-cli/audits/5?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/sickn33-hugging-face-cli/security.svg)](https://skillstore.io/skills/sickn33-hugging-face-cli?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/sickn33-hugging-face-cli?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/sickn33-hugging-face-cli/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/sickn33-hugging-face-cli.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
Academic citations (APA · BibTeX · CFF)

APA citation

sickn33. (2026). hugging-face-cli security audit report (audit version 5) [Author version unspecified]. Skillstore. https://skillstore.io/skills/sickn33-hugging-face-cli/audits/5

BibTeX citation

@techreport{sickn33-sickn33-hugging-face-cli-2026, author = {sickn33}, title = {hugging-face-cli security audit report (audit version 5)}, institution = {Skillstore}, year = {2026}, number = {5}, url = {https://skillstore.io/skills/sickn33-hugging-face-cli/audits/5}, note = {Author version unspecified} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "hugging-face-cli security audit report (audit version 5)" version: "unspecified" type: report authors: - name: "sickn33" date-released: "2026-07-24" url: "https://skillstore.io/skills/sickn33-hugging-face-cli/audits/5" identifiers: - type: other value: "skillstore:sickn33-hugging-face-cli:audit:5" description: "Skillstore immutable audit report identifier"

Skillstore Score

Why this score Evidence Confidence: High
55
Architecture
85
Maintainability
87
Content
69
Community
91
Spec Compliance

What You Can Build

Transfer model artifacts

Choose safe download or upload options, revisions, filters, destinations, and output formats for model repositories.

Operate hosted workloads

Plan jobs, schedules, endpoints, Spaces, hardware settings, logs, and lifecycle actions with approval checkpoints.

Explore Hub resources

Search models, datasets, papers, leaderboards, collections, and repository metadata using focused CLI queries.

Try These Prompts

Check account access 
Confirm which Hugging Face account is active and explain the result. Do not print access tokens.
Download a model revision 
Prepare the safest `hf` command to download [REPO_ID] at [REVISION] into [LOCAL_DIR]. Explain authentication and disk requirements.
Plan a bucket synchronization 
Create a dry-run-first plan to synchronize [LOCAL_DIR] with bucket [BUCKET_ID]. Preserve remote files unless I explicitly approve deletion.
Deploy and operate an endpoint 
Design an `hf` CLI workflow to deploy [MODEL_REPO] as endpoint [NAME] in [REGION]. Include cost checks, secret handling, verification, and rollback.

Best Practices

  • Use dry runs, saved plans, and explicit confirmations before deletion, synchronization, deployment, or public visibility changes.
  • Keep tokens in approved credential storage or environment variables, and never print or place them in command history.
  • Pin repository revisions and verify current CLI help, pricing, quotas, and hardware availability before execution.

Avoid

  • Do not run delete, merge, sync-delete, or infrastructure commands without reviewing the exact target and impact.
  • Do not pass access tokens directly in commands, logs, prompts, or shared files.
  • Do not install extensions or remote scripts without reviewing their source, pinning versions, and verifying integrity.

Frequently Asked Questions

Does this skill install the Hugging Face CLI?
It documents an installer workflow, but installation downloads remote code and should require review, integrity checks, and user approval.
Can it authenticate to private repositories?
It can guide authentication and token selection. The user must provide authorized credentials through secure local mechanisms.
Can it manage both models and datasets?
Yes. It covers discovery, metadata, downloads, uploads, revisions, repository operations, and related resources for both types.
Does it support destructive operations?
The CLI supports deletion and replacement operations. These actions require target verification, previews when available, and explicit approval.
Can it run Hugging Face Jobs and endpoints?
Yes. It can plan creation, inspection, logs, scaling, updates, pausing, resuming, and deletion within the available CLI commands.
Will every documented command work with my installed version?
Not necessarily. Check local command help because the catalog reflects version 1.21.0 and hosted services can change.

Developer Details

Author

sickn33

License

Apache-2.0

Skillstore revision

r2

Version notice

The author did not declare a version.

Repository

https://github.com/sickn33/antigravity-awesome-skills/tree/main/skills/hugging-face-cli

Ref

88a8e9a07f4c54ab105c1c41b6267c287146b07b

Maintenance freshness

7/26/2026

Usage

7 downloads · 105 views

File structure

📄 SKILL.md

More from sickn33

View all

Related Skills

View all