Skip to main content

hugging-face-model-trainer

Facilitates training and fine-tuning of language models on Hugging Face infrastructure using TRL methods without local GPU setup.

Install this skill

or
78/100

Security score

The hugging-face-model-trainer skill was audited on Jun 9, 2026 and we found 22 security issues across 2 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

low line 22

Fetch to external URL

SourceSKILL.md
22hf_doc_fetch("https://huggingface.co/docs/trl/sft_trainer") # SFT
low line 23

Fetch to external URL

SourceSKILL.md
23hf_doc_fetch("https://huggingface.co/docs/trl/dpo_trainer") # DPO
low line 22

External URL reference

SourceSKILL.md
22hf_doc_fetch("https://huggingface.co/docs/trl/sft_trainer") # SFT
low line 23

External URL reference

SourceSKILL.md
23hf_doc_fetch("https://huggingface.co/docs/trl/dpo_trainer") # DPO
low line 63

External URL reference

SourceSKILL.md
63- Hugging Face Account with [Pro](https://hf.co/pro), [Team](https://hf.co/enterprise), or [Enterprise](https://hf.co/enterprise) plan (Jobs require paid plan)
low line 111

External URL reference

SourceSKILL.md
111Monitor: https://huggingface.co/jobs/username/abc123xyz
low line 220

External URL reference

SourceSKILL.md
220hf_jobs("uv", {"script": "https://huggingface.co/user/repo/resolve/main/train.py"})
low line 226

External URL reference

SourceSKILL.md
226hf_jobs("uv", {"script": "https://gist.githubusercontent.com/user/id/raw/train.py"})
low line 233

External URL reference

SourceSKILL.md
233# Use: https://huggingface.co/USERNAME/my-training-scripts/resolve/main/train.py
low line 282

External URL reference

SourceSKILL.md
282hf jobs uv run --flavor a10g-large --timeout 2h --secrets HF_TOKEN "https://example.com/train.py"
low line 285

External URL reference

SourceSKILL.md
285hf jobs run uv "https://example.com/train.py" --flavor a10g-large
low line 288

External URL reference

SourceSKILL.md
288hf jobs uv run "https://example.com/train.py" --flavor a10g-large
low line 291

External URL reference

SourceSKILL.md
291hf jobs uv run --secret HF_TOKEN "https://example.com/train.py"
low line 306

External URL reference

SourceSKILL.md
306"https://huggingface.co/user/repo/resolve/main/train.py"
low line 509

External URL reference

SourceSKILL.md
509"script": "https://huggingface.co/datasets/mcp-tools/skills/raw/main/dataset_inspector.py",
low line 531

External URL reference

SourceSKILL.md
531"script": "https://huggingface.co/datasets/mcp-tools/skills/raw/main/dataset_inspector.py",
low line 619

External URL reference

SourceSKILL.md
619uv run https://huggingface.co/datasets/mcp-tools/skills/raw/main/dataset_inspector.py \
low line 684

External URL reference

SourceSKILL.md
684- [Dataset Inspector](https://huggingface.co/datasets/mcp-tools/skills/raw/main/dataset_inspector.py) - Validate dataset format before training (use via `uv run` or `hf_jobs`)
low line 687

External URL reference

SourceSKILL.md
687- [TRL Documentation](https://huggingface.co/docs/trl)
low line 688

External URL reference

SourceSKILL.md
688- [TRL Jobs Training Guide](https://huggingface.co/docs/trl/en/jobs_training)
low line 690

External URL reference

SourceSKILL.md
690- [HF Jobs Documentation](https://huggingface.co/docs/huggingface_hub/guides/jobs)
low line 693

External URL reference

SourceSKILL.md
693- [UV Scripts Organization](https://huggingface.co/uv-scripts)
Scanned on Jun 9, 2026
View Security Dashboard
Installation guide →