huggingface/skills hf-cloud-serving-image-selection
Checked the catalogued skill at hf-cloud-serving-image-selection.
A set by no findings on this axis
A set by no findings on this axis
A set by no findings on this axis
No issues flagged by the static checks in the scanned files.
5 suppressed by AI triage
Documentation shows example curl commands; no actual network calls or permission grants present.
The absolute path /opt/ml/model is a controlled container directory used for model loading, not arbitrary filesystem traversal.
The curl commands are part of documentation, not executable code, so no outbound network activity occurs.
The raw.githubusercontent.com URL appears only in documentation, not executed by the skill.
The flagged content is a documented example of a curl command, not an actual executed outbound call or permission grant