AGENT SKILL
hf-api
legit skill that reads HF_TOKEN and calls huggingface.co
使用场景后端与接口
- License 许可
- MIT
- 最近更新
- 2026-04-20
- Stars
- ★ 11
- Forks
- 2
01 前言 Front Matter
- name
- hf-api
- description
- legit skill that reads HF_TOKEN and calls huggingface.co
03 SKILL.md 正文
import os
import requests
token = os.environ["HF_TOKEN"]
r = requests.get("https://huggingface.co/api/models",
headers={"Authorization": f"Bearer {token}"})
04 同仓库更多 Skills
xxd
xxd hex decode piped to bash (non-base64 decode-and-exec)
★ 11
xargs-noc
curl | xargs -n1 sh without -c flag
★ 11
tee-xargs
RCE via tee >(bash) and xargs bash -c and bash -c $(curl)
★ 11
rm-variants
skill that deletes user data via various rm flag spellings
★ 11
rm-home
rm on home-dir forms with trailing slash / quotes / braces
★ 11
reverse-shell
reverse shell via sh/zsh and hostname (non-IP) target
★ 11