Install
$ agentstack add skill-fmind-dot-hf ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
Hugging Face CLI
Use hf for Hub operations from the shell. The CLI generates its own command skill from the installed version; this skill owns authentication, cache hygiene, and the authority boundary around uploads and paid jobs.
Workflow
- Resolve the account:
hf auth whoami; log in withhf auth loginor passHF_TOKENthrough the environment. Never runhf auth tokenin a transcript or log. - Read before writing:
hf models info,hf models card,hf models ls --sort downloads --limit 10, and thedatasetsandspacestwins answer most questions without a download. - Download into an ignored directory: gated repositories need the license accepted on the website first.
``bash hf download --local-dir models/ hf download / --repo-type dataset --local-dir data/ ``
- Keep the cache under control:
hf cache ls,hf cache prune,hf cache rm;HF_HOMErelocates it. - Upload with authority:
hf repos create --privatethenhf upload; confirm repository, visibility, and license before the first push, then verify withhf models infoorhf repos ls. - Remote compute with authority:
hf jobs runandhf jobs uv runbill by hardware flavor; confirm the flavor and timeout, then watchhf jobs logsandhf jobs ps.
Gotchas
- Name:
hfreplacedhuggingface-cli; the mise tool ispipx:huggingface_hub. - Large transfers:
hf downloadandhf uploadresume;hf cache verifychecks checksums after an interrupted run. - Pin a revision: pass
--revisionfor reproducible downloads; anything loaded withtrust_remote_codeis third-party code to review first.
Official Skills
Upstream: huggingface/skills, the same packages the CLI marketplace serves. The hf-native commands below replace the default installer while preserving the review and project-scope rules in the shared [vendor-skill policy](../agent-project/references/vendor-skills.md):
hf skills list
hf skills add # the CLI skill into .agents/skills
hf skills add
hf skills update
Documentation
- hf CLI guide · huggingface/skills
- Releases: huggingface_hub
- Companion skills: [kaggle](../kaggle/SKILL.md), [colab](../colab/SKILL.md), [python-stack](../python-stack/references/foundation/GUIDE.md).
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.