arrow_backAI Skill ShieldpublicDefault-branch GitHub scan
Trust report
huggingface/skills
Give your agents the power of the Hugging Face ecosystem
View scanned commit on GitHubopen_in_new0%Static score
88% score12% score gap
Highest finding: Critical severityLatest scan
critical severity
Static analysis score
Install decision
Do Not Install
Critical security findings were detected. Hold installation and review the evidence before proceeding.
Scan identity
- Scanned
- 2026-08-30
- Commit
- cead19e10754
- License
- Apache-2.0
- Repository
- Active
Repository scan summary
- policyFindings
- 178
- terminalInstall surface
- 10
- Repository reach
- 10,990
Validation findings detected
Execution paths reviewed
GitHub stars
Highest-priority findings
The latest default-branch scan, ordered by severity.
- criticalPipe-to-shell download and executeskills/hf-cli/SKILL.md:6
- criticalDownload and execute (chained)skills/hf-cli/SKILL.md:6
- criticalSS-SHELL-002skills/hf-cli/SKILL.md:6
- criticalAWS credential accessskills/hf-cloud-aws-context-discovery/SKILL.md:16
- highcurl to external hostskills/hf-cli/SKILL.md:6
Share this trust result
The badge stays linked to the latest default-branch scan for this skill path.
Do you consider this skill safe to use?
Community signals help prioritize human review; they do not change the scan verdict.
AI Skill Shield is an automated pre-install review, not a guarantee of safety. Confirm sensitive permissions and execution paths before installation.