SkillTriage

hf-cli skill

github:huggingface/skills/skills/hf-cli

Review

Capabilities a person should look at before installing.

Why

Contains instructions placed where the agent reads them indirectly. in SKILL.md
Installs packages from outside the sanctioned set. in SKILL.md

GitHub archives have no registry checksum; the result is tied to the commit shown.

Scanned version: commit fabc634a893f62ad5c2039830397efa35fa62715
Scan date: 2026-10-26
Analysis revision: e5f556c4112718a0
Integrity: No registry checksum (git archive); commit fabc634a893f62ad5c2039830397efa35fa62715; archive sha256 e4fafc2ac966a964257ee1e9897436cac0e8dd552396b0b5f1c2756cfad8e640
Listed in: VoltAgent/awesome-agent-skills
Licence: Apache-2.0
Repository: https://github.com/huggingface/skills

Automated static analysis by MoorAI's open-source engine. A verdict describes what the package's code can do, not the intent of its authors. Report a mistake →