Skip to main content

hugging-face-evaluation

Facilitates structured evaluation management for Hugging Face model cards, enabling efficient data extraction and custom evaluations.

Install this skill

or
81/100

Security score

The hugging-face-evaluation skill was audited on May 15, 2026 and we found 7 security issues across 3 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 646

Python subprocess execution

SourceSKILL.md
646result = subprocess.run([
medium line 156

Access to .env file

SourceSKILL.md
156- `.env` is loaded automatically if `python-dotenv` is installed
low line 203

Access to .env file

SourceSKILL.md
203# Create .env file
low line 204

Access to .env file

SourceSKILL.md
204echo "AA_API_KEY=your-api-key" >> .env
low line 205

Access to .env file

SourceSKILL.md
205echo "HF_TOKEN=your-hf-token" >> .env
medium line 614

Access to .env file

SourceSKILL.md
614- **Solution**: Set environment variable or add to .env file
low line 517

External URL reference

SourceSKILL.md
517url: https://source-url.com
Scanned on May 15, 2026
View Security Dashboard
Installation guide →