·
Last changedVersion:
This version did not pass the hardening gate. Hardening applied 6 targeted changes and preserved all other text. Classified findings before hardening: 20. Classified findings closed: 0. Classified findings remaining: 20. Unclassified scanner findings remaining: 0. Review findings closed: 1. Review findings remaining: 31.
1
2
17
Expand | File | Group | Subtype | Severity | Status |
|---|---|---|---|---|---|
SKILL.md | Safety Bypass & Harmful Content | — | High | Open | |
references/3d-outputs.md | Excessive Agency & Rogue Autonomy | — | Medium | Open | |
references/debugging.md | Sensitive Data & Secret Exposure | Data exfiltration | Medium | Open | |
references/3d-generation.md | Prompt Injection | Third-party content as instructions | Low | Open | |
references/debugging.md | Prompt Injection | Third-party content as instructions | Low | Open | |
references/3d-models.md | Prompt Injection | Third-party content as instructions | Low | Open | |
SKILL.md | Sensitive Data & Secret Exposure | Hardcoded secret | Low | Open | |
references/requirements.md | Supply Chain & Install-Time Trust | Install-time download and execute | Low | Open |
20 findings
No skill file found.
Bring Chainguard's hardening pipeline to your first-party skills — custom rulesets, automated remediation, full audit trail.
skills.cgr.dev/public/github.com/huggingface/skills/huggingface-spaces:latest
Apache-2.0
HARDENING.md