ClawHub
Back to skill

Security audit

Hugging Face ZeroGPU

Security checks for vulnerabilities and agentic risk

Overview

This is a documentation-only skill for Hugging Face ZeroGPU development and does not contain hidden execution, credential handling, or persistence.

Safe to install for ZeroGPU development guidance. As with any ML deployment advice, verify current Hugging Face documentation and wheel URLs before changing dependencies or publishing a Space.

SkillSpector

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Static analysis

No suspicious patterns detected.