Scanned skills

huggingface/skills train-sentence-transformers

Checked the catalogued skill at train-sentence-transformers.

SkillTrust corpus scan 2 October 2026 v0.13.0 via skillsh Verify on GitHub
D AI-triaged 16
D Security

D; retained sample includes a high finding · SD-007 · what this rule accepts as a false positive →

A Permissions

A set by no findings on this axis

A Transparency

A set by no findings on this axis

showing 10 of 16
securityhigh SD-007
scripts/mine_hard_negatives.py
securityhigh SD-007
scripts/train_cross_encoder_distillation_example.py
securityhigh SD-007
scripts/train_cross_encoder_example.py
securityhigh SD-007
scripts/train_cross_encoder_listwise_example.py
securityhigh SD-007
scripts/train_multi_vector_encoder_example.py
securityhigh SD-007
scripts/train_sentence_transformer_distillation_example.py
securityhigh SD-007
scripts/train_sentence_transformer_example.py
securityhigh SD-007
scripts/train_sentence_transformer_make_multilingual_example.py
securityhigh SD-007
scripts/train_sentence_transformer_make_multilingual_example.py
securityhigh SD-007
scripts/train_sentence_transformer_matryoshka_example.py
2 suppressed by AI triage
securityhigh SD-007 benign_example
references/hf_jobs_execution.md

The snippet merely documents a common installation command; it is not executed automatically, so it poses no real threat.

securitycritical SD-009 benign_example
references/hf_jobs_execution.md

The documented curl‑pipe‑bash example is a standard installation step, not an active exploit, so it is benign.