ops-huggingface

# /ops-huggingface Operate the Hugging Face Hub with dry-run safety defaults. > RECONSTRUCTED 2026-08-12 from the surviving `.pyc` bytecode after the source > was lost (never tracked in git, no disk copy survived). The reconstruction is > faithful to the 3.12 disassembly and is now TRACKED so the skill cannot be > lost again. See `scripts/hf_ops.py` header for provenance. ## Commands ```bash run.sh whoami # auth check, no token exposure run.sh search-models "text classification" --limit 20 run.sh search-datasets "cybersecurity CWE" --limit 20 run.sh repo-info OWASP/example --type dataset run.sh list-files bert-base-uncased --type model run.sh validate-card ./README.md --type model run.sh template-card --type dataset --repo me/mydata --output ./README.md # Mutations are DRY-RUN by default; add --execute to actually touch the Hub: run.sh create-repo me/newrepo --type dataset # dry-run receipt run.sh create-repo me/newrepo --type dataset --execute # actually creates run.sh upload ./file.json --repo me/data --execute run.sh snapshot me/data --local-dir ./out --execute ``` ## Safety contract - `create-repo`, `upload`, `snapshot` do nothing to the Hub without `--execute`; without it they emit a receipt with `dry_run: true, executed: false`. - Every command records `auth_checked` and `auth_source` (`env` / `huggingface_hub_cache` / `none`) WITHOUT printing token values. - `search-*` and `repo-info` are read-only. ## Auth Reads `HF_TOKEN` / `HUGGINGFACE_HUB_TOKEN` from the environment or the repository `.env` (loaded at startup), or a cached `huggingface-cli login` token. No token is ever echoed. ## Requirements `huggingface_hub` in the active environment. If absent, every command fails closed with a clear `Missing dependency: huggingface_hub` message.