Back to skill
Skillv1.0.0

VirusTotal security

Huggingface Hub · External malware reputation and Code Insight signals for this exact artifact hash.

Scanner verdict

BenignApr 29, 2026, 5:51 PM
Hash
32f329a30a87a27656dccd4423802e18c36e70d15bf7b3feb264d94489f1aa8c
Source
palm
Verdict
benign
Code Insight
Type: OpenClaw Skill Name: hf-hub Version: 1.0.0 The skill is a standard CLI wrapper for the official Hugging Face Hub library, providing functionality to list, search, download, and upload models, datasets, and spaces. The Python script `scripts/hf_hub.py` follows best practices for CLI tools, using `argparse` for command handling and securely retrieving the `HF_TOKEN` from environment variables or a designated secrets path (`/etc/secrets/HF_TOKEN`). No evidence of data exfiltration, malicious execution, or prompt injection was found.
External report
View on VirusTotal