huggingface-lora-space-builder
Build and publish a Gradio demo on Hugging Face Spaces for a user-provided LoRA. Use when someone asks to create, generate, ship, or publish a Space, demo, Gradio app, or playground for a LoRA — including LoRAs for Qwen-Image, Qwen-Image-Edit, LTX-Video, Wan, FLUX, SDXL, or other diffusion base m...
Install this skill
or
85/100
Security score
The huggingface-lora-space-builder skill was audited on Oct 1, 2026 and we found 1 security issue across 1 threat category, including 1 high-severity. Review the findings below before installing.
Categories Tested
Security Issues
high line 338
Urgency-based manipulation
SourceSKILL.md
| 336 | Before declaring the Space done and handing the URL to the user, exercise it once end-to-end. Several failure modes (wrong `weight_name`, wrong pipeline class, missing transitive dep, gated-base-model token issue) build cleanly and only surface at first inference. The `gradio` Python package ships a CLI that does exactly this — `gradio info` returns the endpoint signature, `gradio predict` runs an actual inference. Both ship with the `gradio` pip dependency the Space already needs, so they're available in any environment where this skill ran. |
| 337 | |
| 338 | **Step 1 — Wait for the build.** `create_repo` returns immediately, but the container image is still building. Poll `HfApi().get_space_runtime(repo_id).stage` until it reaches `RUNNING`: |
| 339 | |
| 340 | ```python |
Scanned on Oct 1, 2026
View Security Dashboard