SkillTriage

hf-cli skill

github:huggingface/skills/skills/hf-cli

Review

Capabilities a person should look at before installing.

Why

Contains instructions placed where the agent reads them indirectly. in SKILL.md
Installs packages from outside the sanctioned set. in SKILL.md

GitHub archives have no registry checksum; the result is tied to the commit shown.

Scanned version: commit abc20ae526d8b4c0e4dff89f904adce28a4a0eb6
Scan date: 2026-09-17
Analysis revision: 7ffaa6bb9324edc9
Integrity: No registry checksum (git archive); commit abc20ae526d8b4c0e4dff89f904adce28a4a0eb6; archive sha256 37fb60e2d7d6539f685a4376967c9e1652db16dabcc3902a6a47fc902f07f9c6
Listed in: VoltAgent/awesome-agent-skills
Licence: Apache-2.0
Repository: https://github.com/huggingface/skills

Automated static analysis by MoorAI's open-source engine. A verdict describes what the package's code can do, not the intent of its authors. Report a mistake →