Huggingface Trends

PassAudited by ClawScan on May 1, 2026.

Overview

This skill appears to fetch public Hugging Face model listings as described, with only disclosed optional proxy, JSON export, dependency, and cron-job setup considerations.

This skill looks safe for its stated use. Before installing, decide whether you trust the proxy shown in the examples, install the Python dependency carefully, and only add the cron job if you intentionally want scheduled daily monitoring.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The skill may not run until the Python 'requests' package is installed.

Why it was flagged

The skill relies on a manually installed PyPI dependency rather than a declared install spec. This is common for a Python HTTP client and aligns with the purpose, but users should install dependencies from a trusted environment.

Skill content
pip install requests
Recommendation

Install dependencies in a trusted Python environment, preferably a virtual environment, and avoid installing unrelated packages.

What this means

If you use the proxy option, your Hugging Face API requests are routed through that proxy.

Why it was flagged

The documentation repeatedly recommends routing requests through a proxy. This is disclosed and purpose-aligned, but the proxy can observe connection metadata and may affect responses.

Skill content
The script requires an HTTP proxy to access Hugging Face API ... scripts/hf_trends.py -p http://172.28.96.1:10808
Recommendation

Use only a proxy you trust, and omit the proxy flag if your environment can access Hugging Face directly.

What this means

If you choose to add the cron job, the skill will run on a schedule and write log output.

Why it was flagged

The skill includes a user-directed cron example for repeated daily execution. The included code does not install this automatically, and daily monitoring is aligned with the stated purpose.

Skill content
# Create cron job for daily monitoring
0 9 * * * cd /home/ltx/.openclaw/workspace && \
Recommendation

Only create the cron job if you want ongoing monitoring, and remove or edit it when no longer needed.