Claude Code, Skill
skills
skills, a skill listed in the PlugVet directory.
Compatibility: Not stated.
Grade C
One Medium finding. Read the report before installing.
Not a guarantee. A hygiene check of the source at the commit shown, not a security audit.
INSTALL_REMOTE_SCRIPT
Why this grade
- INSTALL_REMOTE_SCRIPT Medium
Fetches a script from the network and runs it (a pipe to a shell, or an install hook with a URL).
apps/quests/README.md, line 68
curl -LsSf https://hf.co/cli/install.sh | bash
Any High, or two or more Medium findings, give D. One Medium gives C. Low findings or a security Note give B. Each code names a finding behind the letter.
Grades are a hygiene check of the source at the commit shown, on the date checked, not a security audit or a guarantee. The free directory grades are automated. Before release, a PlugVet engineer reviews every paid report and any grade we hold back, including all F grades, against the source code and the evidence we quote.
What was checked
Plain notes from the hygiene checks.
Permissions
Note
requests shell access. The manifest names this permission.
PERMISSION_SHELL_DECLARED
scripts/run_skills_help.py, line 27
result = subprocess.run(
skills/hugging-face-evaluation/SKILL.md, line 640
result = subprocess.run([
skills/hugging-face-evaluation/scripts/inspect_eval_uv.py, line 94
subprocess.run(cmd, check=True, cwd=tasks_root)
Show more
skills/hugging-face-evaluation/scripts/inspect_vllm_uv.py, line 111
subprocess.run(cmd, check=True)
skills/hugging-face-evaluation/scripts/inspect_vllm_uv.py, line 176
subprocess.run(cmd, check=True)
skills/hugging-face-evaluation/scripts/lighteval_vllm_uv.py, line 106
subprocess.run(cmd, check=True)
skills/hugging-face-evaluation/scripts/lighteval_vllm_uv.py, line 170
subprocess.run(cmd, check=True)
skills/hugging-face-evaluation/scripts/run_eval_job.py, line 74
subprocess.run(cmd, check=True)
Install and update
Serious
install fetches a script from the network.
INSTALL_REMOTE_SCRIPT
apps/quests/README.md, line 68
curl -LsSf https://hf.co/cli/install.sh | bash
Network
Concern
can reach a host that is not written as a fixed address. can reach datasets-server.huggingface.co. The description does not name that host. can reach your-api.com. The description does not name that host.
NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST
apps/evals-leaderboard/app.py, line 52
resp = requests.get(LEADERBOARD_URL, timeout=30)
apps/evals-leaderboard/app.py, line 57
resp = requests.get(METADATA_URL, timeout=30)
apps/hackers-leaderboard/app.py, line 46
resp = requests.get(LEADERBOARD_URL, timeout=30)
Show more
apps/hackers-leaderboard/app.py, line 51
resp = requests.get(METADATA_URL, timeout=30)
skills/hugging-face-dataset-viewer/SKILL.md, line 44
curl "https://datasets-server.huggingface.co/rows?dataset=stanfordnlp/imdb&config=plain_text&split=train&offset=0&length=100"
skills/hugging-face-dataset-viewer/SKILL.md, line 45
curl "https://datasets-server.huggingface.co/rows?dataset=stanfordnlp/imdb&config=plain_text&split=train&offset=100&length=100"
skills/hugging-face-dataset-viewer/SKILL.md, line 69
curl -s "https://datasets-server.huggingface.co/parquet?dataset=cfahlgren1/hub-stats" \
skills/hugging-face-dataset-viewer/SKILL.md, line 98
curl -s "https://datasets-server.huggingface.co/parquet?dataset=<namespace>/<repo>"
skills/hugging-face-tool-builder/SKILL.md, line 72
curl -s "https://huggingface.co/.well-known/openapi.json" | jq '.paths | keys | sort'
skills/hugging-face-tool-builder/SKILL.md, line 78
curl -s "https://huggingface.co/.well-known/openapi.json" | jq '.paths["/api/models"]'
skills/hugging-face-tool-builder/references/baseline_hf_api.sh, line 40
curl -s "${headers[@]}" "https://huggingface.co/api/models?limit=${LIMIT}"
Secrets
Concern
reads a credential or environment file.
SECRETS_ENV_READ SECRETS_PATH_DOTENV
apps/evals-leaderboard/collect_evals.py, line 448
token = os.environ.get("HF_TOKEN")
apps/hackers-leaderboard/collect_points.py, line 495
token = os.environ.get("HF_TOKEN")
skills/hugging-face-cli/references/commands.md, line 675
hf jobs run --env-file .env python:3.12 python script.py
Show more
skills/hugging-face-datasets/scripts/dataset_manager.py, line 35
HF_TOKEN = os.environ.get("HF_TOKEN")
skills/hugging-face-datasets/scripts/sql_manager.py, line 55
HF_TOKEN = os.environ.get("HF_TOKEN")
skills/hugging-face-evaluation/SKILL.md, line 197
# Create .env file
skills/hugging-face-evaluation/SKILL.md, line 198
echo "AA_API_KEY=your-api-key" >> .env
skills/hugging-face-evaluation/SKILL.md, line 199
echo "HF_TOKEN=your-hf-token" >> .env
skills/hugging-face-evaluation/examples/USAGE_EXAMPLES.md, line 24
cp examples/.env.example .env
skills/hugging-face-evaluation/examples/USAGE_EXAMPLES.md, line 25
# Edit .env with your tokens
skills/hugging-face-evaluation/examples/artificial_analysis_to_hub.py, line 42
API_KEY = os.getenv("AA_API_KEY")
skills/hugging-face-evaluation/examples/artificial_analysis_to_hub.py, line 43
HF_TOKEN = os.getenv("HF_TOKEN")
skills/hugging-face-evaluation/scripts/evaluation_manager.py, line 30
"""Load .env if python-dotenv is available; keep help usable without it."""
skills/hugging-face-evaluation/scripts/evaluation_manager.py, line 515
hf_token = os.getenv("HF_TOKEN")
skills/hugging-face-evaluation/scripts/evaluation_manager.py, line 725
hf_token = os.getenv("HF_TOKEN")
skills/hugging-face-evaluation/scripts/evaluation_manager.py, line 1175
- Set HF_TOKEN (and AA_API_KEY for import-aa); .env is loaded automatically if python-dotenv is installed.
Agent instructions
Pass
No instruction to ignore earlier instructions or to hide a step.
Obfuscation
Pass
No encoded or minified payload found.
Licence
Pass
A licence file is present (LICENSE).
Maintainer activity
Pass
The latest commit is within the last 365 days.
Note
Hygiene check of commit 3fbfee65ccef. requests shell access. The manifest names this permission. install fetches a script from the network. can reach a host that is not written as a fixed address. can reach datasets-server.huggingface.co. The description does not name that host. can reach your-api.com. The description does not name that host. reads a credential or environment file.
Date and source
Date checked:
github.com
Commit graded: 3fbfee65ccef8cea3eb035a63d322574b8debb90
This link goes to the original host. PlugVet does not host or check what you download from there, and installing it is your own decision and risk.