Skip to main content

hugging-face-evaluation

Facilitates the management of evaluation results in Hugging Face model cards, integrating various evaluation methods and APIs.

Install this skill

or
81/100

Security score

The hugging-face-evaluation skill was audited on Jun 9, 2026 and we found 7 security issues across 3 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 634

Python subprocess execution

SourceSKILL.md
634result = subprocess.run([
medium line 144

Access to .env file

SourceSKILL.md
144- `.env` is loaded automatically if `python-dotenv` is installed
low line 191

Access to .env file

SourceSKILL.md
191# Create .env file
low line 192

Access to .env file

SourceSKILL.md
192echo "AA_API_KEY=your-api-key" >> .env
low line 193

Access to .env file

SourceSKILL.md
193echo "HF_TOKEN=your-hf-token" >> .env
medium line 602

Access to .env file

SourceSKILL.md
602- **Solution**: Set environment variable or add to .env file
low line 505

External URL reference

SourceSKILL.md
505url: https://source-url.com
Scanned on Jun 9, 2026
View Security Dashboard
Installation guide →