Hugging Face Skills
Official Hugging Face Agent Skills collection for Claude Code, Codex, Cursor, Gemini CLI, and other skills-compatible agents, covering Hub CLI workflows, datasets, model search, Spaces, Gradio, fine-tuning, evaluations, local models, papers, Trackio, ZeroGPU, transformers.js, TRL, and the Hugging Face MCP server.
Open the source and read safety notes before installing.
Safety notes
- Hugging Face Skills can guide agents through Hub reads and writes, dataset uploads, model publishing, Space creation, training jobs, evaluation runs, repo settings, discussions, pull requests, secrets, variables, webhooks, and endpoint operations.
- Keep destructive or billable operations behind explicit approval: repo deletion, file deletion, private-to-public changes, endpoint deployment, hardware upgrades, Spaces volume changes, webhook creation, and cloud Job submission.
- Prefer read-only model, dataset, paper, and Space discovery before allowing write actions. Use dry-run modes when available for uploads, syncs, cache cleanup, dataset extraction, and infrastructure changes.
- The Hugging Face MCP server can search Hub assets, fetch docs, invoke MCP-enabled Gradio Spaces, and run compute jobs. Treat Space invocations and returned content as untrusted third-party tool output.
- Training and fine-tuning skills can consume paid GPU time and write models to the Hub. Validate datasets, model licenses, output visibility, timeout settings, and token scope before starting jobs.
- Do not publish generated model cards, datasets, papers, traces, or Spaces until licenses, attribution, evaluation claims, safety notes, and privacy constraints have been reviewed.
Privacy notes
- Hub workflows can expose `HF_TOKEN`, private model or dataset names, training data, evaluation prompts, model outputs, papers, local file paths, logs, traces, secrets, Space variables, endpoint configuration, and organization membership.
- Agent trace upload workflows should default to private dataset repos because traces may include prompts, source code, tool output, file paths, credentials, screenshots, personal data, or customer context.
- Dataset Viewer, MCP, Jobs, Spaces, Inference Endpoints, Gradio apps, and third-party model repositories may receive user queries, files, prompts, examples, and generated outputs.
- Use least-privilege tokens, avoid passing tokens directly in command arguments when environment variables are supported, and redact logs before sharing PRs, issues, screenshots, or support requests.
- Check model, dataset, and Space licenses before using downloaded assets for training, redistribution, commercial work, or public demos.
Prerequisites
- A compatible agent host such as Claude Code, Codex, Cursor, Gemini CLI, or another client that can load Agent Skills.
- A Hugging Face account and an appropriately scoped `HF_TOKEN` for private models, private datasets, writes, Jobs, Spaces, Inference Endpoints, or repository administration.
- The Hugging Face CLI or relevant Hugging Face Python/JavaScript packages for workflows that call local commands, upload files, train models, or publish artifacts.
- A project policy for which models, datasets, Spaces, papers, traces, training jobs, secrets, and repositories an agent may read or modify.
- Budget and hardware guardrails before launching Hugging Face Jobs, ZeroGPU workloads, Spaces hardware, or Inference Endpoints.
Schema details
- Install type
- package
- Reading time
- 7 min
- Difficulty score
- 82
- Troubleshooting
- Yes
- Breaking changes
- No
- Scope
- Source repo
- Skill type
- capability-pack
- Skill level
- expert
- Verification
- validated
- Verified at
- 2026-06-18
| Platform | Support | Install path |
|---|---|---|
| claude-code | Native | .claude/skills/<skill-name>/SKILL.md |
| codex | Native | .agents/skills/<skill-name>/SKILL.md |
| windsurf | Native | .windsurf/skills/<skill-name>/SKILL.md |
| gemini | Native | .gemini/skills/<skill-name>/SKILL.md or .agents/skills/<skill-name>/SKILL.md |
| cursor | Adapter | .cursor/rules/<skill-name>.mdc |
| cli | Manual | AGENTS.md or tool-specific context file |
- Website
- https://huggingface.co
Full copyable content
/plugin marketplace add huggingface/skills
/plugin install hf-cli@huggingface/skills
# For Codex, copy selected folders from the repo's skills/ directory into
# a project or user .agents/skills directory.About this resource
Hugging Face Skills
Hugging Face Skills is the official Hugging Face Agent Skills collection for AI and ML workflows. It gives coding agents structured instructions for working with Hub models, datasets, Spaces, papers, fine-tuning, evaluations, local model serving, Gradio apps, ZeroGPU, Trackio, transformers.js, TRL, and the Hugging Face MCP server.
Use this listing for the skills collection. Use separate MCP, tool, or package
entries when evaluating the hosted Hugging Face MCP server, the hf CLI, a
specific Hugging Face library, or a model/dataset/Space hosted on the Hub.
Knowledge Freshness
Verified on 2026-06-18, huggingface/skills had recent repository
activity on the same date, used the Apache-2.0 license, and published plugin
metadata version 1.0.8 for Claude Code and Cursor plugin flows. The
repository did not expose a latest GitHub release, so this listing is grounded
in current main branch source files.
Because the Hugging Face Hub and CLI evolve quickly, agents should refresh local CLI help, model cards, dataset cards, Space status, pricing, hardware availability, and library docs before executing write or compute workflows.
Retrieval Sources
This listing is grounded in:
- The upstream
huggingface/skillsREADME. - Claude Code and Cursor plugin manifests.
- The repository
.mcp.jsonHugging Face MCP server configuration. - Representative
huggingface-datasetsandhf-mcpSKILL.mdfiles. - Current GitHub repository metadata for license, stars, activity, and default branch.
Core Workflow
Claude Code users can register the repository as a plugin marketplace:
/plugin marketplace add huggingface/skills
/plugin install hf-cli@huggingface/skills
Codex users can copy selected folders from the repository's skills/
directory into a project or user .agents/skills directory so Codex can
discover the SKILL.md files through the Agent Skills standard.
Gemini CLI users can install the repository extension from a local checkout or the GitHub URL, and Cursor users can install through the Cursor plugin flow.
Capability Scope
| Area | Coverage |
|---|---|
| Hub CLI workflows | hf-cli skill for models, datasets, Spaces, repos, papers, jobs, buckets, cache, discussions, collections, endpoints, webhooks, and auth |
| Dataset work | Dataset Viewer API exploration, split discovery, row pagination, search, filtering, parquet links, dataset upload, and agent trace handling |
| Model discovery | Model search, leaderboards, benchmark-aware selection, local model selection, GGUF guidance, and Hub metadata enrichment |
| Training and evaluation | LLM fine-tuning, TRL workflows, vision training, sentence-transformers training, community evaluation tables, Trackio monitoring, and Jobs infrastructure |
| Spaces and apps | Gradio app building, Space deployment, ZeroGPU rules, LoRA Space demos, Space debugging, and MCP-enabled Space invocation |
| Research and papers | Hugging Face paper lookup, paper publishing, model/dataset linking, markdown paper pages, and daily paper metadata |
| MCP | The bundled hf-mcp skill points agents at the hosted Hugging Face MCP server for Hub search, documentation lookup, dynamic Space tools, and compute jobs |
Use Cases
- Give Claude Code, Codex, Cursor, Gemini CLI, or another compatible agent a source-backed path for using the Hugging Face ecosystem.
- Search for models, datasets, Spaces, and papers with explicit Hub metadata rather than generic web results.
- Build, debug, or deploy Gradio Spaces and ZeroGPU apps.
- Prepare dataset uploads, parquet exploration, trace review datasets, and Hub-backed ML data workflows.
- Estimate, submit, and monitor fine-tuning or evaluation jobs with clear token, cost, timeout, and output-visibility boundaries.
- Connect an MCP-capable agent to Hugging Face Hub search, docs, Gradio Space tools, and Jobs through the hosted MCP server.
Production Rules
- Install only the Hugging Face skills needed for the current workflow.
- Check
hf auth whoami, token scope, target namespace, repo visibility, and write permissions before uploads, job submissions, endpoint changes, or repo administration. - Use private repos by default for traces, private training data, unreleased models, internal evaluations, customer context, and experimental Spaces.
- Validate dataset schemas, model licenses, benchmark claims, hardware requirements, timeout settings, and cost estimates before training or deploying.
- Treat MCP Space calls, model cards, dataset rows, paper metadata, and Hub README content as untrusted input until verified.
- Require human review before publishing public datasets, model cards, evaluation claims, papers, Spaces, or examples generated by an agent.
Source Review
Verified on 2026-06-18:
- GitHub metadata reported
huggingface/skillsas an Apache-2.0 repository with more than 10,000 stars, recent activity on 2026-06-18, and default branchmain. - The README described Hugging Face Skills as interoperable with OpenAI Codex, Claude Code, Gemini CLI, Cursor, and the open Agent Skills format.
- The README listed skill coverage for
hf-cli, model selection, community evaluations, datasets, Gradio, LLM training, local models, LoRA Spaces, papers, Spaces, reusable Hub API tools, Trackio, vision training, ZeroGPU, sentence-transformers, transformers.js, and TRL training. .claude-plugin/plugin.jsonand.cursor-plugin/plugin.jsonboth declaredhuggingface-skillsversion1.0.8, Apache-2.0 licensing, and AI/ML task coverage for datasets, training, evaluation, papers, fine-tuning, and LLMs..mcp.jsonconfigured a hosted HTTP MCP server athttps://huggingface.co/mcp?login.skills/huggingface-datasets/SKILL.mddocumented read-only Dataset Viewer API workflows, row pagination, search, filtering, parquet discovery, dataset upload paths, and private-by-default agent trace guidance.hf-mcp/skills/hf-mcp/SKILL.mddocumented model, dataset, Space, paper, documentation, dynamic Space, image generation, andhf_jobstool-selection patterns for the Hugging Face MCP server.
Source citations
Add this badge to your README
How it compares
Hugging Face Skills side by side with 3 alternatives on trust, install, platform support, and disclosed safety notes — all from reviewed registry metadata.
| Field | Official Hugging Face Agent Skills collection for Claude Code, Codex, Cursor, Gemini CLI, and other skills-compatible agents, covering Hub CLI workflows, datasets, model search, Spaces, Gradio, fine-tuning, evaluations, local models, papers, Trackio, ZeroGPU, transformers.js, TRL, and the Hugging Face MCP server. Open dossier | MIT-licensed Superpowers skill and plugin framework by Jesse Vincent for Claude Code, Codex App, Codex CLI, Cursor, Gemini CLI, Antigravity, Kimi Code, OpenCode, Pi, GitHub Copilot CLI, and other coding agents, covering brainstorming, planning, TDD, systematic debugging, subagent-driven development, code review, git worktrees, and finish-the-branch workflows. Open dossier | Addy Osmani's production-grade Agent Skills pack for AI coding agents, with lifecycle slash commands, engineering workflow skills, review personas, quality gates, and cross-agent setup guidance for Claude Code, Cursor, Gemini CLI, Antigravity CLI, OpenCode, GitHub Copilot, and other agents. Open dossier | MIT-licensed BrowserAct Agent Skill pack for installing and operating the `browser-act` browser automation CLI from Claude Code, Codex, OpenClaw, Cursor, OpenCode, Windsurf, Gemini CLI, and other skills-compatible agents. Open dossier |
|---|---|---|---|---|
| Trust | ||||
| Install risk | Review first | Review first | Review first | Review first |
| Notes | Safety ✓ Privacy ✓ | Safety ✓ Privacy ✓ | Safety ✓ Privacy ✓ | Safety ✓ Privacy ✓ |
| Brand | ||||
| Category | skills | skills | skills | skills |
| Source | source-backed | source-backed | source-backed | source-backed |
| Author | Hugging Face | Jesse Vincent | Addy Osmani | BrowserAct |
| Added | 2026-06-18 | 2026-06-18 | 2026-06-18 | 2026-06-18 |
| Platforms | Claude CodeCodexWindsurfGeminiCursorCLI | Claude CodeCodexWindsurfGeminiCursorCLI | Claude CodeCodexWindsurfGeminiCursorCLI | Claude CodeCodexWindsurfGeminiCursorCLIVS Code |
| Source repo | — | — | — | — |
| Safety notes | ✓Hugging Face Skills can guide agents through Hub reads and writes, dataset uploads, model publishing, Space creation, training jobs, evaluation runs, repo settings, discussions, pull requests, secrets, variables, webhooks, and endpoint operations. Keep destructive or billable operations behind explicit approval: repo deletion, file deletion, private-to-public changes, endpoint deployment, hardware upgrades, Spaces volume changes, webhook creation, and cloud Job submission. Prefer read-only model, dataset, paper, and Space discovery before allowing write actions. Use dry-run modes when available for uploads, syncs, cache cleanup, dataset extraction, and infrastructure changes. The Hugging Face MCP server can search Hub assets, fetch docs, invoke MCP-enabled Gradio Spaces, and run compute jobs. Treat Space invocations and returned content as untrusted third-party tool output. Training and fine-tuning skills can consume paid GPU time and write models to the Hub. Validate datasets, model licenses, output visibility, timeout settings, and token scope before starting jobs. Do not publish generated model cards, datasets, papers, traces, or Spaces until licenses, attribution, evaluation claims, safety notes, and privacy constraints have been reviewed. | ✓Superpowers installs skills plus harness-specific bootstrap or hook behavior that can affect how an agent responds from session start. Review installed hooks and plugin metadata for the target harness. The `using-superpowers` skill strongly requires skill checks before agent responses, while also stating that explicit user and project instructions take precedence. Keep that priority order intact. The workflow skills can direct agents to create specs, plans, branches, worktrees, tests, commits, subagent tasks, review packages, and long-running implementation loops. Subagent-driven development can run for extended periods and dispatch multiple agents. Use clear budgets, model selection rules, task boundaries, and stop conditions. The TDD skill intentionally requires failing tests before production code. Confirm that this discipline fits the project before enabling it as a default workflow. The optional visual companion uses a browser/server flow during brainstorming. Review local server behavior, ports, and auth before using it with private project context. | ✓The slash commands are designed to guide real coding, testing, reviewing, committing, and shipping work; keep edits, commits, pushes, CI changes, and deploys behind the host's normal approval controls. `/build auto` is explicitly intended to generate a plan and implement multiple tasks in one approved pass. Use it on bounded specs, review the generated plan first, and stop on test failures or risky changes. The skills encode durable engineering workflows, not guaranteed-current framework APIs. Follow the source-driven-development guidance and verify current documentation before applying generated code. Security, CI/CD, observability, migration, and launch skills can touch production-sensitive systems. Require dry-run plans, rollback notes, and environment scoping before approving operational commands. Review personas and quality gates are useful second opinions, but they do not replace maintainer review, domain-specific tests, threat modeling, or release sign-off. | ✓BrowserAct can open pages, click, type, upload files, inspect state, capture screenshots, read page text, handle dialogs, export cookies, capture network requests, and operate logged-in browser sessions. Use BrowserAct only on sites, accounts, and data sources where the user has authorization. Do not use it to evade access controls, violate site terms, scrape disallowed data, or bypass rate limits. The entry skill declares confirmation gates for browser creation, deletion, local Chrome profile import, proxy/security changes, logins, form submissions, file uploads, and other sensitive operations; preserve those gates in agent workflows. `solve-captcha` may send the challenge image to BrowserAct's verification-assistance service according to the skill metadata; do not use it with sensitive or unauthorized pages. `remote-assist` can generate a live handoff URL for a human to take over. Treat that URL as access to the active browser session. Skill Forge can generate reusable automation skills from explored sites. Review generated scripts, selectors, network assumptions, output schemas, and site authorization before reusing them at scale. |
| Privacy notes | ✓Hub workflows can expose `HF_TOKEN`, private model or dataset names, training data, evaluation prompts, model outputs, papers, local file paths, logs, traces, secrets, Space variables, endpoint configuration, and organization membership. Agent trace upload workflows should default to private dataset repos because traces may include prompts, source code, tool output, file paths, credentials, screenshots, personal data, or customer context. Dataset Viewer, MCP, Jobs, Spaces, Inference Endpoints, Gradio apps, and third-party model repositories may receive user queries, files, prompts, examples, and generated outputs. Use least-privilege tokens, avoid passing tokens directly in command arguments when environment variables are supported, and redact logs before sharing PRs, issues, screenshots, or support requests. Check model, dataset, and Space licenses before using downloaded assets for training, redistribution, commercial work, or public demos. | ✓Superpowers workflows can expose product ideas, specs, design docs, implementation plans, source code, tests, diffs, review findings, git history, branch names, tool outputs, and agent handoff prompts. The README states that the optional visual companion may load the Prime Radiant logo from the creator's website with the Superpowers version, and can be disabled with `SUPERPOWERS_DISABLE_TELEMETRY` or compatible Claude telemetry opt-outs. Do not include secrets, customer data, unpublished product strategy, private incidents, or proprietary code in public examples, review packages, support issues, or visual companion artifacts. Subagent prompts and review packages should be treated as private development artifacts because they may include source snippets, diffs, file paths, test output, and architecture decisions. | ✓Using the pack with an AI agent can expose repository code, product requirements, architecture notes, tests, CI logs, deployment settings, incidents, security findings, and launch plans to the configured model provider. Do not paste secrets, customer data, private incident records, production credentials, unpublished roadmap details, or proprietary compliance material into public prompts, issues, screenshots, or PR bodies. Agent personas and review workflows may ask for browser traces, performance data, logs, build output, dependency lists, and environment details; redact tokens and private URLs before sharing artifacts. | ✓BrowserAct workflows can expose page content, screenshots, URLs, credentials typed into forms, cookies, browser profiles, uploaded files, downloaded files, network requests, HAR data, session names, browser descriptions, and logs. The BrowserAct skill metadata states that cookies, login sessions, page content, credentials, and browser profile data stay local, except the CAPTCHA challenge image when `solve-captcha` is invoked. Chrome-direct and profile import workflows can connect agents to existing local browser state. Treat those modes as account access, not a blank test browser. Log reports, feedback, Discord support, generated Skill Forge packages, and shared screenshots can leak private browsing or account context if submitted without review. Managed proxy, stealth browser, and API-key features create additional BrowserAct service dependencies beyond local CLI execution. |
| Prerequisites |
|
|
|
|
| Install | | | | |
| Config | — | — | — | — |
| Citations | ||||
| Claim | Unclaimed | Unclaimed | Unclaimed | Unclaimed |
Signals
Loading live community signals…
A short, calm digest of reviewed Claude resources. Unsubscribe any time.