hf-cloud-serving-image-selection
What this skill does
The skill is a utility for selecting and deploying appropriate HuggingFace-curated serving containers for SageMaker model deployments. It is not a security or teaching skill, but a practical tool for
github/huggingface - Least Privilege - 10.9k stars
Threat analysis
Skill info
pkg:github/huggingface/skills@ec01082?skill=hf-cloud-serving-image-selectionAssessments (1)
Least Privilege
Least Privilege via local-llm-review
scripts/mirror_image.py
The script uses `subprocess.run` to execute `aws` and `docker` commands, which may inherit the current shell's AWS context. This could be a risk if the script is run in a context with elevated privileBadge
Add the Anomity scan badge for hf-cloud-serving-image-selection to your README.
How Anomity governs this at runtime
Scan-time vetting tells you what a skill says it will do. Anomity's Endpoint Sensor sees what agents actually do: it discovers skills alongside every other AI artifact on the endpoint, and runtime governance can allow, deny, or log the tool calls a skill triggers. Policy violations route to your SIEM, Slack, email, or Jira, backed by a queryable 90-day audit trail.
Book a 30-minute demo to see your own skill inventory.
Methodology and disputes
Every skill is assessed by the Anomity Skill Intelligence engine against its public source; findings indicate risk patterns, not confirmed exploitation. Maintainer of hf-cloud-serving-image-selection? Report an issue or request a rescan.
