Skip to main content
skillsSource-backedReview first Safety Privacy
Hugging Face logo

Hugging Face Skills

Official Hugging Face Agent Skills collection for Claude Code, Codex, Cursor, Gemini CLI, and other skills-compatible agents, covering Hub CLI workflows, datasets, model search, Spaces, Gradio, fine-tuning, evaluations, local models, papers, Trackio, ZeroGPU, transformers.js, TRL, and the Hugging Face MCP server.

by Hugging Face·added 2026-06-18·
HarnessClaude CodeCodexWindsurfGeminiCursorCLI
Level:expertType:capability-packVerified:validated
Review first review before installing

Open the source and read safety notes before installing.

Safety notes

  • Hugging Face Skills can guide agents through Hub reads and writes, dataset uploads, model publishing, Space creation, training jobs, evaluation runs, repo settings, discussions, pull requests, secrets, variables, webhooks, and endpoint operations.
  • Keep destructive or billable operations behind explicit approval: repo deletion, file deletion, private-to-public changes, endpoint deployment, hardware upgrades, Spaces volume changes, webhook creation, and cloud Job submission.
  • Prefer read-only model, dataset, paper, and Space discovery before allowing write actions. Use dry-run modes when available for uploads, syncs, cache cleanup, dataset extraction, and infrastructure changes.
  • The Hugging Face MCP server can search Hub assets, fetch docs, invoke MCP-enabled Gradio Spaces, and run compute jobs. Treat Space invocations and returned content as untrusted third-party tool output.
  • Training and fine-tuning skills can consume paid GPU time and write models to the Hub. Validate datasets, model licenses, output visibility, timeout settings, and token scope before starting jobs.
  • Do not publish generated model cards, datasets, papers, traces, or Spaces until licenses, attribution, evaluation claims, safety notes, and privacy constraints have been reviewed.

Privacy notes

  • Hub workflows can expose `HF_TOKEN`, private model or dataset names, training data, evaluation prompts, model outputs, papers, local file paths, logs, traces, secrets, Space variables, endpoint configuration, and organization membership.
  • Agent trace upload workflows should default to private dataset repos because traces may include prompts, source code, tool output, file paths, credentials, screenshots, personal data, or customer context.
  • Dataset Viewer, MCP, Jobs, Spaces, Inference Endpoints, Gradio apps, and third-party model repositories may receive user queries, files, prompts, examples, and generated outputs.
  • Use least-privilege tokens, avoid passing tokens directly in command arguments when environment variables are supported, and redact logs before sharing PRs, issues, screenshots, or support requests.
  • Check model, dataset, and Space licenses before using downloaded assets for training, redistribution, commercial work, or public demos.

Prerequisites

  • A compatible agent host such as Claude Code, Codex, Cursor, Gemini CLI, or another client that can load Agent Skills.
  • A Hugging Face account and an appropriately scoped `HF_TOKEN` for private models, private datasets, writes, Jobs, Spaces, Inference Endpoints, or repository administration.
  • The Hugging Face CLI or relevant Hugging Face Python/JavaScript packages for workflows that call local commands, upload files, train models, or publish artifacts.
  • A project policy for which models, datasets, Spaces, papers, traces, training jobs, secrets, and repositories an agent may read or modify.
  • Budget and hardware guardrails before launching Hugging Face Jobs, ZeroGPU workloads, Spaces hardware, or Inference Endpoints.

Schema details

Install type
package
Reading time
7 min
Difficulty score
82
Troubleshooting
Yes
Breaking changes
No
Source repository stats
Scope
Source repo
Skill and platform metadata
Skill type
capability-pack
Skill level
expert
Verification
validated
Verified at
2026-06-18
Retrieval sources
https://github.com/huggingface/skills/blob/main/README.mdhttps://github.com/huggingface/skills/blob/main/.claude-plugin/plugin.jsonhttps://github.com/huggingface/skills/blob/main/.cursor-plugin/plugin.jsonhttps://github.com/huggingface/skills/blob/main/.mcp.jsonhttps://github.com/huggingface/skills/blob/main/skills/huggingface-datasets/SKILL.mdhttps://github.com/huggingface/skills/blob/main/hf-mcp/skills/hf-mcp/SKILL.md
Tested platforms
Claude CodeCodexCursorGemini CLIAgent Skills-compatible hostsMCP-capable agent hosts
PlatformSupportInstall path
claude-codeNative.claude/skills/<skill-name>/SKILL.md
codexNative.agents/skills/<skill-name>/SKILL.md
windsurfNative.windsurf/skills/<skill-name>/SKILL.md
geminiNative.gemini/skills/<skill-name>/SKILL.md or .agents/skills/<skill-name>/SKILL.md
cursorAdapter.cursor/rules/<skill-name>.mdc
cliManualAGENTS.md or tool-specific context file
Tool listing metadata
Full copyable content
/plugin marketplace add huggingface/skills
/plugin install hf-cli@huggingface/skills

# For Codex, copy selected folders from the repo's skills/ directory into
# a project or user .agents/skills directory.

About this resource

Hugging Face Skills

Hugging Face Skills is the official Hugging Face Agent Skills collection for AI and ML workflows. It gives coding agents structured instructions for working with Hub models, datasets, Spaces, papers, fine-tuning, evaluations, local model serving, Gradio apps, ZeroGPU, Trackio, transformers.js, TRL, and the Hugging Face MCP server.

Use this listing for the skills collection. Use separate MCP, tool, or package entries when evaluating the hosted Hugging Face MCP server, the hf CLI, a specific Hugging Face library, or a model/dataset/Space hosted on the Hub.

Knowledge Freshness

Verified on 2026-06-18, huggingface/skills had recent repository activity on the same date, used the Apache-2.0 license, and published plugin metadata version 1.0.8 for Claude Code and Cursor plugin flows. The repository did not expose a latest GitHub release, so this listing is grounded in current main branch source files.

Because the Hugging Face Hub and CLI evolve quickly, agents should refresh local CLI help, model cards, dataset cards, Space status, pricing, hardware availability, and library docs before executing write or compute workflows.

Retrieval Sources

This listing is grounded in:

  • The upstream huggingface/skills README.
  • Claude Code and Cursor plugin manifests.
  • The repository .mcp.json Hugging Face MCP server configuration.
  • Representative huggingface-datasets and hf-mcp SKILL.md files.
  • Current GitHub repository metadata for license, stars, activity, and default branch.

Core Workflow

Claude Code users can register the repository as a plugin marketplace:

/plugin marketplace add huggingface/skills
/plugin install hf-cli@huggingface/skills

Codex users can copy selected folders from the repository's skills/ directory into a project or user .agents/skills directory so Codex can discover the SKILL.md files through the Agent Skills standard.

Gemini CLI users can install the repository extension from a local checkout or the GitHub URL, and Cursor users can install through the Cursor plugin flow.

Capability Scope

Area Coverage
Hub CLI workflows hf-cli skill for models, datasets, Spaces, repos, papers, jobs, buckets, cache, discussions, collections, endpoints, webhooks, and auth
Dataset work Dataset Viewer API exploration, split discovery, row pagination, search, filtering, parquet links, dataset upload, and agent trace handling
Model discovery Model search, leaderboards, benchmark-aware selection, local model selection, GGUF guidance, and Hub metadata enrichment
Training and evaluation LLM fine-tuning, TRL workflows, vision training, sentence-transformers training, community evaluation tables, Trackio monitoring, and Jobs infrastructure
Spaces and apps Gradio app building, Space deployment, ZeroGPU rules, LoRA Space demos, Space debugging, and MCP-enabled Space invocation
Research and papers Hugging Face paper lookup, paper publishing, model/dataset linking, markdown paper pages, and daily paper metadata
MCP The bundled hf-mcp skill points agents at the hosted Hugging Face MCP server for Hub search, documentation lookup, dynamic Space tools, and compute jobs

Use Cases

  • Give Claude Code, Codex, Cursor, Gemini CLI, or another compatible agent a source-backed path for using the Hugging Face ecosystem.
  • Search for models, datasets, Spaces, and papers with explicit Hub metadata rather than generic web results.
  • Build, debug, or deploy Gradio Spaces and ZeroGPU apps.
  • Prepare dataset uploads, parquet exploration, trace review datasets, and Hub-backed ML data workflows.
  • Estimate, submit, and monitor fine-tuning or evaluation jobs with clear token, cost, timeout, and output-visibility boundaries.
  • Connect an MCP-capable agent to Hugging Face Hub search, docs, Gradio Space tools, and Jobs through the hosted MCP server.

Production Rules

  • Install only the Hugging Face skills needed for the current workflow.
  • Check hf auth whoami, token scope, target namespace, repo visibility, and write permissions before uploads, job submissions, endpoint changes, or repo administration.
  • Use private repos by default for traces, private training data, unreleased models, internal evaluations, customer context, and experimental Spaces.
  • Validate dataset schemas, model licenses, benchmark claims, hardware requirements, timeout settings, and cost estimates before training or deploying.
  • Treat MCP Space calls, model cards, dataset rows, paper metadata, and Hub README content as untrusted input until verified.
  • Require human review before publishing public datasets, model cards, evaluation claims, papers, Spaces, or examples generated by an agent.

Source Review

Verified on 2026-06-18:

  • GitHub metadata reported huggingface/skills as an Apache-2.0 repository with more than 10,000 stars, recent activity on 2026-06-18, and default branch main.
  • The README described Hugging Face Skills as interoperable with OpenAI Codex, Claude Code, Gemini CLI, Cursor, and the open Agent Skills format.
  • The README listed skill coverage for hf-cli, model selection, community evaluations, datasets, Gradio, LLM training, local models, LoRA Spaces, papers, Spaces, reusable Hub API tools, Trackio, vision training, ZeroGPU, sentence-transformers, transformers.js, and TRL training.
  • .claude-plugin/plugin.json and .cursor-plugin/plugin.json both declared huggingface-skills version 1.0.8, Apache-2.0 licensing, and AI/ML task coverage for datasets, training, evaluation, papers, fine-tuning, and LLMs.
  • .mcp.json configured a hosted HTTP MCP server at https://huggingface.co/mcp?login.
  • skills/huggingface-datasets/SKILL.md documented read-only Dataset Viewer API workflows, row pagination, search, filtering, parquet discovery, dataset upload paths, and private-by-default agent trace guidance.
  • hf-mcp/skills/hf-mcp/SKILL.md documented model, dataset, Space, paper, documentation, dynamic Space, image generation, and hf_jobs tool-selection patterns for the Hugging Face MCP server.

Source citations

Add this badge to your README

Show that Hugging Face Skills is listed on HeyClaude. Paste this Markdown into your README — it renders the badge and links back to this page.

Listed on HeyClaude
[![Listed on HeyClaude](https://heyclau.de/badge/skills/huggingface-skills.svg)](https://heyclau.de/entry/skills/huggingface-skills)

How it compares

Hugging Face Skills side by side with 3 alternatives on trust, install, platform support, and disclosed safety notes — all from reviewed registry metadata.

Field

Official Hugging Face Agent Skills collection for Claude Code, Codex, Cursor, Gemini CLI, and other skills-compatible agents, covering Hub CLI workflows, datasets, model search, Spaces, Gradio, fine-tuning, evaluations, local models, papers, Trackio, ZeroGPU, transformers.js, TRL, and the Hugging Face MCP server.

Open dossier

MIT-licensed Superpowers skill and plugin framework by Jesse Vincent for Claude Code, Codex App, Codex CLI, Cursor, Gemini CLI, Antigravity, Kimi Code, OpenCode, Pi, GitHub Copilot CLI, and other coding agents, covering brainstorming, planning, TDD, systematic debugging, subagent-driven development, code review, git worktrees, and finish-the-branch workflows.

Open dossier

Addy Osmani's production-grade Agent Skills pack for AI coding agents, with lifecycle slash commands, engineering workflow skills, review personas, quality gates, and cross-agent setup guidance for Claude Code, Cursor, Gemini CLI, Antigravity CLI, OpenCode, GitHub Copilot, and other agents.

Open dossier

MIT-licensed BrowserAct Agent Skill pack for installing and operating the `browser-act` browser automation CLI from Claude Code, Codex, OpenClaw, Cursor, OpenCode, Windsurf, Gemini CLI, and other skills-compatible agents.

Open dossier
Trust
Install riskReview firstReview firstReview firstReview first
Notes Safety Privacy Safety Privacy Safety Privacy Safety Privacy
BrandHugging Face logoHugging FaceOpenCode logoOpenCodeCursor logoCursorCursor logoCursor
Categoryskillsskillsskillsskills
Sourcesource-backedsource-backedsource-backedsource-backed
AuthorHugging FaceJesse VincentAddy OsmaniBrowserAct
Added2026-06-182026-06-182026-06-182026-06-18
Platforms
Claude CodeCodexWindsurfGeminiCursorCLI
Claude CodeCodexWindsurfGeminiCursorCLI
Claude CodeCodexWindsurfGeminiCursorCLI
Claude CodeCodexWindsurfGeminiCursorCLIVS Code
Source repo
Safety notesHugging Face Skills can guide agents through Hub reads and writes, dataset uploads, model publishing, Space creation, training jobs, evaluation runs, repo settings, discussions, pull requests, secrets, variables, webhooks, and endpoint operations. Keep destructive or billable operations behind explicit approval: repo deletion, file deletion, private-to-public changes, endpoint deployment, hardware upgrades, Spaces volume changes, webhook creation, and cloud Job submission. Prefer read-only model, dataset, paper, and Space discovery before allowing write actions. Use dry-run modes when available for uploads, syncs, cache cleanup, dataset extraction, and infrastructure changes. The Hugging Face MCP server can search Hub assets, fetch docs, invoke MCP-enabled Gradio Spaces, and run compute jobs. Treat Space invocations and returned content as untrusted third-party tool output. Training and fine-tuning skills can consume paid GPU time and write models to the Hub. Validate datasets, model licenses, output visibility, timeout settings, and token scope before starting jobs. Do not publish generated model cards, datasets, papers, traces, or Spaces until licenses, attribution, evaluation claims, safety notes, and privacy constraints have been reviewed.Superpowers installs skills plus harness-specific bootstrap or hook behavior that can affect how an agent responds from session start. Review installed hooks and plugin metadata for the target harness. The `using-superpowers` skill strongly requires skill checks before agent responses, while also stating that explicit user and project instructions take precedence. Keep that priority order intact. The workflow skills can direct agents to create specs, plans, branches, worktrees, tests, commits, subagent tasks, review packages, and long-running implementation loops. Subagent-driven development can run for extended periods and dispatch multiple agents. Use clear budgets, model selection rules, task boundaries, and stop conditions. The TDD skill intentionally requires failing tests before production code. Confirm that this discipline fits the project before enabling it as a default workflow. The optional visual companion uses a browser/server flow during brainstorming. Review local server behavior, ports, and auth before using it with private project context.The slash commands are designed to guide real coding, testing, reviewing, committing, and shipping work; keep edits, commits, pushes, CI changes, and deploys behind the host's normal approval controls. `/build auto` is explicitly intended to generate a plan and implement multiple tasks in one approved pass. Use it on bounded specs, review the generated plan first, and stop on test failures or risky changes. The skills encode durable engineering workflows, not guaranteed-current framework APIs. Follow the source-driven-development guidance and verify current documentation before applying generated code. Security, CI/CD, observability, migration, and launch skills can touch production-sensitive systems. Require dry-run plans, rollback notes, and environment scoping before approving operational commands. Review personas and quality gates are useful second opinions, but they do not replace maintainer review, domain-specific tests, threat modeling, or release sign-off.BrowserAct can open pages, click, type, upload files, inspect state, capture screenshots, read page text, handle dialogs, export cookies, capture network requests, and operate logged-in browser sessions. Use BrowserAct only on sites, accounts, and data sources where the user has authorization. Do not use it to evade access controls, violate site terms, scrape disallowed data, or bypass rate limits. The entry skill declares confirmation gates for browser creation, deletion, local Chrome profile import, proxy/security changes, logins, form submissions, file uploads, and other sensitive operations; preserve those gates in agent workflows. `solve-captcha` may send the challenge image to BrowserAct's verification-assistance service according to the skill metadata; do not use it with sensitive or unauthorized pages. `remote-assist` can generate a live handoff URL for a human to take over. Treat that URL as access to the active browser session. Skill Forge can generate reusable automation skills from explored sites. Review generated scripts, selectors, network assumptions, output schemas, and site authorization before reusing them at scale.
Privacy notesHub workflows can expose `HF_TOKEN`, private model or dataset names, training data, evaluation prompts, model outputs, papers, local file paths, logs, traces, secrets, Space variables, endpoint configuration, and organization membership. Agent trace upload workflows should default to private dataset repos because traces may include prompts, source code, tool output, file paths, credentials, screenshots, personal data, or customer context. Dataset Viewer, MCP, Jobs, Spaces, Inference Endpoints, Gradio apps, and third-party model repositories may receive user queries, files, prompts, examples, and generated outputs. Use least-privilege tokens, avoid passing tokens directly in command arguments when environment variables are supported, and redact logs before sharing PRs, issues, screenshots, or support requests. Check model, dataset, and Space licenses before using downloaded assets for training, redistribution, commercial work, or public demos.Superpowers workflows can expose product ideas, specs, design docs, implementation plans, source code, tests, diffs, review findings, git history, branch names, tool outputs, and agent handoff prompts. The README states that the optional visual companion may load the Prime Radiant logo from the creator's website with the Superpowers version, and can be disabled with `SUPERPOWERS_DISABLE_TELEMETRY` or compatible Claude telemetry opt-outs. Do not include secrets, customer data, unpublished product strategy, private incidents, or proprietary code in public examples, review packages, support issues, or visual companion artifacts. Subagent prompts and review packages should be treated as private development artifacts because they may include source snippets, diffs, file paths, test output, and architecture decisions.Using the pack with an AI agent can expose repository code, product requirements, architecture notes, tests, CI logs, deployment settings, incidents, security findings, and launch plans to the configured model provider. Do not paste secrets, customer data, private incident records, production credentials, unpublished roadmap details, or proprietary compliance material into public prompts, issues, screenshots, or PR bodies. Agent personas and review workflows may ask for browser traces, performance data, logs, build output, dependency lists, and environment details; redact tokens and private URLs before sharing artifacts.BrowserAct workflows can expose page content, screenshots, URLs, credentials typed into forms, cookies, browser profiles, uploaded files, downloaded files, network requests, HAR data, session names, browser descriptions, and logs. The BrowserAct skill metadata states that cookies, login sessions, page content, credentials, and browser profile data stay local, except the CAPTCHA challenge image when `solve-captcha` is invoked. Chrome-direct and profile import workflows can connect agents to existing local browser state. Treat those modes as account access, not a blank test browser. Log reports, feedback, Discord support, generated Skill Forge packages, and shared screenshots can leak private browsing or account context if submitted without review. Managed proxy, stealth browser, and API-key features create additional BrowserAct service dependencies beyond local CLI execution.
Prerequisites
  • A compatible agent host such as Claude Code, Codex, Cursor, Gemini CLI, or another client that can load Agent Skills.
  • A Hugging Face account and an appropriately scoped `HF_TOKEN` for private models, private datasets, writes, Jobs, Spaces, Inference Endpoints, or repository administration.
  • The Hugging Face CLI or relevant Hugging Face Python/JavaScript packages for workflows that call local commands, upload files, train models, or publish artifacts.
  • A project policy for which models, datasets, Spaces, papers, traces, training jobs, secrets, and repositories an agent may read or modify.
  • A supported coding-agent harness and its plugin or extension install path.
  • A repository where Superpowers can add skills, startup hooks, and workflow instructions for the selected agent.
  • A willingness to follow structured workflows such as brainstorming, planning, TDD, subagent implementation, code review, and branch finishing.
  • Project-specific instructions that clearly state where Superpowers workflows should be adapted or overridden.
  • Claude Code plugin support, an Agent Skills compatible installer, or an agent/editor that can load Markdown instruction files.
  • A software project where lifecycle guidance for specs, planning, implementation, testing, review, simplification, or launch is appropriate.
  • A version-controlled workspace with a known approval model for edits, tests, commits, pushes, and deployments.
  • Current framework, platform, and API documentation for any concrete implementation work produced under these skills.
  • Python 3.12 or newer and the uv package manager for the documented CLI install path.
  • A compatible agent host that can read `SKILL.md` files and execute shell commands.
  • Chrome or Chromium for local `chrome` and `chrome-direct` browser modes.
  • A BrowserAct API key only for optional stealth browsers, stealth extraction, managed proxies, and CAPTCHA assistance.
Install
/plugin marketplace add huggingface/skills
/plugin install superpowers@claude-plugins-official
/plugin marketplace add addyosmani/agent-skills
uv tool install browser-act-cli --python 3.12
Config
Citations
ClaimUnclaimedUnclaimedUnclaimedUnclaimed

Signals

Loading live community signals…

More like this, weekly

A short, calm digest of reviewed Claude resources. Unsubscribe any time.