Skip to main content

hugging-face-model-trainer

Enables training and fine-tuning of language models on Hugging Face Jobs infrastructure using TRL methods without local GPU setup.

Install this skill

or
78/100

Security score

The hugging-face-model-trainer skill was audited on May 23, 2026 and we found 22 security issues across 2 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

low line 22

Fetch to external URL

SourceSKILL.md
22hf_doc_fetch("https://huggingface.co/docs/trl/sft_trainer") # SFT
low line 23

Fetch to external URL

SourceSKILL.md
23hf_doc_fetch("https://huggingface.co/docs/trl/dpo_trainer") # DPO
low line 22

External URL reference

SourceSKILL.md
22hf_doc_fetch("https://huggingface.co/docs/trl/sft_trainer") # SFT
low line 23

External URL reference

SourceSKILL.md
23hf_doc_fetch("https://huggingface.co/docs/trl/dpo_trainer") # DPO
low line 73

External URL reference

SourceSKILL.md
73- Hugging Face Account with [Pro](https://hf.co/pro), [Team](https://hf.co/enterprise), or [Enterprise](https://hf.co/enterprise) plan (Jobs require paid plan)
low line 121

External URL reference

SourceSKILL.md
121Monitor: https://huggingface.co/jobs/username/abc123xyz
low line 230

External URL reference

SourceSKILL.md
230hf_jobs("uv", {"script": "https://huggingface.co/user/repo/resolve/main/train.py"})
low line 236

External URL reference

SourceSKILL.md
236hf_jobs("uv", {"script": "https://gist.githubusercontent.com/user/id/raw/train.py"})
low line 243

External URL reference

SourceSKILL.md
243# Use: https://huggingface.co/USERNAME/my-training-scripts/resolve/main/train.py
low line 292

External URL reference

SourceSKILL.md
292hf jobs uv run --flavor a10g-large --timeout 2h --secrets HF_TOKEN "https://example.com/train.py"
low line 295

External URL reference

SourceSKILL.md
295hf jobs run uv "https://example.com/train.py" --flavor a10g-large
low line 298

External URL reference

SourceSKILL.md
298hf jobs uv run "https://example.com/train.py" --flavor a10g-large
low line 301

External URL reference

SourceSKILL.md
301hf jobs uv run --secret HF_TOKEN "https://example.com/train.py"
low line 316

External URL reference

SourceSKILL.md
316"https://huggingface.co/user/repo/resolve/main/train.py"
low line 519

External URL reference

SourceSKILL.md
519"script": "https://huggingface.co/datasets/mcp-tools/skills/raw/main/dataset_inspector.py",
low line 541

External URL reference

SourceSKILL.md
541"script": "https://huggingface.co/datasets/mcp-tools/skills/raw/main/dataset_inspector.py",
low line 629

External URL reference

SourceSKILL.md
629uv run https://huggingface.co/datasets/mcp-tools/skills/raw/main/dataset_inspector.py \
low line 696

External URL reference

SourceSKILL.md
696- [Dataset Inspector](https://huggingface.co/datasets/mcp-tools/skills/raw/main/dataset_inspector.py) - Validate dataset format before training (use via `uv run` or `hf_jobs`)
low line 699

External URL reference

SourceSKILL.md
699- [TRL Documentation](https://huggingface.co/docs/trl)
low line 700

External URL reference

SourceSKILL.md
700- [TRL Jobs Training Guide](https://huggingface.co/docs/trl/en/jobs_training)
low line 702

External URL reference

SourceSKILL.md
702- [HF Jobs Documentation](https://huggingface.co/docs/huggingface_hub/guides/jobs)
low line 705

External URL reference

SourceSKILL.md
705- [UV Scripts Organization](https://huggingface.co/uv-scripts)
Scanned on May 23, 2026
View Security Dashboard
Installation guide →