Skip to main content

hugging-face-model-trainer

Enables training and fine-tuning of language models on Hugging Face Jobs using TRL methods, optimizing for cloud GPU resources.

Install this skill

or
78/100

Security score

The hugging-face-model-trainer skill was audited on Mar 14, 2026 and we found 22 security issues across 2 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

low line 22

Fetch to external URL

SourceSKILL.md
22hf_doc_fetch("https://huggingface.co/docs/trl/sft_trainer") # SFT
low line 23

Fetch to external URL

SourceSKILL.md
23hf_doc_fetch("https://huggingface.co/docs/trl/dpo_trainer") # DPO
low line 22

External URL reference

SourceSKILL.md
22hf_doc_fetch("https://huggingface.co/docs/trl/sft_trainer") # SFT
low line 23

External URL reference

SourceSKILL.md
23hf_doc_fetch("https://huggingface.co/docs/trl/dpo_trainer") # DPO
low line 74

External URL reference

SourceSKILL.md
74- Hugging Face Account with [Pro](https://hf.co/pro), [Team](https://hf.co/enterprise), or [Enterprise](https://hf.co/enterprise) plan (Jobs require paid plan)
low line 122

External URL reference

SourceSKILL.md
122Monitor: https://huggingface.co/jobs/username/abc123xyz
low line 231

External URL reference

SourceSKILL.md
231hf_jobs("uv", {"script": "https://huggingface.co/user/repo/resolve/main/train.py"})
low line 237

External URL reference

SourceSKILL.md
237hf_jobs("uv", {"script": "https://gist.githubusercontent.com/user/id/raw/train.py"})
low line 244

External URL reference

SourceSKILL.md
244# Use: https://huggingface.co/USERNAME/my-training-scripts/resolve/main/train.py
low line 293

External URL reference

SourceSKILL.md
293hf jobs uv run --flavor a10g-large --timeout 2h --secrets HF_TOKEN "https://example.com/train.py"
low line 296

External URL reference

SourceSKILL.md
296hf jobs run uv "https://example.com/train.py" --flavor a10g-large
low line 299

External URL reference

SourceSKILL.md
299hf jobs uv run "https://example.com/train.py" --flavor a10g-large
low line 302

External URL reference

SourceSKILL.md
302hf jobs uv run --secret HF_TOKEN "https://example.com/train.py"
low line 317

External URL reference

SourceSKILL.md
317"https://huggingface.co/user/repo/resolve/main/train.py"
low line 517

External URL reference

SourceSKILL.md
517"script": "https://huggingface.co/datasets/mcp-tools/skills/raw/main/dataset_inspector.py",
low line 539

External URL reference

SourceSKILL.md
539"script": "https://huggingface.co/datasets/mcp-tools/skills/raw/main/dataset_inspector.py",
low line 627

External URL reference

SourceSKILL.md
627uv run https://huggingface.co/datasets/mcp-tools/skills/raw/main/dataset_inspector.py \
low line 695

External URL reference

SourceSKILL.md
695- [Dataset Inspector](https://huggingface.co/datasets/mcp-tools/skills/raw/main/dataset_inspector.py) - Validate dataset format before training (use via `uv run` or `hf_jobs`)
low line 698

External URL reference

SourceSKILL.md
698- [TRL Documentation](https://huggingface.co/docs/trl)
low line 699

External URL reference

SourceSKILL.md
699- [TRL Jobs Training Guide](https://huggingface.co/docs/trl/en/jobs_training)
low line 701

External URL reference

SourceSKILL.md
701- [HF Jobs Documentation](https://huggingface.co/docs/huggingface_hub/guides/jobs)
low line 704

External URL reference

SourceSKILL.md
704- [UV Scripts Organization](https://huggingface.co/uv-scripts)
Scanned on Mar 14, 2026
View Security Dashboard