Skip to main content

hugging-science

Hugging Science provides a curated index of scientific datasets and models for AI/ML research across various scientific domains.

Install this skill

or
76/100

Security score

The hugging-science skill was audited on Jun 12, 2026 and we found 8 security issues across 2 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 94

Access to .env file

SourceSKILL.md
94**Load `HF_TOKEN` from a `.env` file when available** — that's where the user keeps secrets. Use `python-dotenv` at the top of any script that hits the HF API:
low line 98

Access to .env file

SourceSKILL.md
98load_dotenv() # picks up HF_TOKEN from .env in cwd or any parent dir
medium line 101

Access to .env file

SourceSKILL.md
101If `.env` doesn't exist or doesn't define `HF_TOKEN`, fall back gracefully — many resources are public and work without it. Don't hard-code tokens, don't echo them, and don't suggest `huggingface-cli
medium line 103

Access to .env file

SourceSKILL.md
103The `.env` file should contain a line like:
medium line 109

Access to .env file

SourceSKILL.md
109If you're creating a new project, also add `.env` to `.gitignore` if it isn't already there.
low line 57

External URL reference

SourceSKILL.md
57- `https://huggingscience.co/llms.txt` — compact index
low line 58

External URL reference

SourceSKILL.md
58- `https://huggingscience.co/llms-full.txt` — every entry, every domain
low line 59

External URL reference

SourceSKILL.md
59- `https://huggingscience.co/topics/<slug>.md` — one domain (slug is hyphenated, e.g. `materials-science.md`, `earth-science.md`, `scientific-reasoning.md`)
Scanned on Jun 12, 2026
View Security Dashboard
Installation guide →