Skip to main content

hugging-face-evaluation

Facilitates the management of evaluation results in Hugging Face model cards, enhancing model benchmarking and analysis.

Install this skill

or
81/100

Security score

The hugging-face-evaluation skill was audited on Mar 14, 2026 and we found 7 security issues across 3 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 640

Python subprocess execution

SourceSKILL.md
640result = subprocess.run([
medium line 150

Access to .env file

SourceSKILL.md
150- `.env` is loaded automatically if `python-dotenv` is installed
low line 197

Access to .env file

SourceSKILL.md
197# Create .env file
low line 198

Access to .env file

SourceSKILL.md
198echo "AA_API_KEY=your-api-key" >> .env
low line 199

Access to .env file

SourceSKILL.md
199echo "HF_TOKEN=your-hf-token" >> .env
medium line 608

Access to .env file

SourceSKILL.md
608- **Solution**: Set environment variable or add to .env file
low line 511

External URL reference

SourceSKILL.md
511url: https://source-url.com
Scanned on Mar 14, 2026
View Security Dashboard