Part IV · Secrets & Agents · SHIPPED · p. 51

The HuggingFace path

You already learned not to clone untrusted code with your eyes closed. Models are the same arrival event with larger files and less muscle memory.

A teammate drops a Hub link in chat. “Just pull it — we need embeddings for the demo.” Two years ago that meant a browser download and a shrug. Now it means gigabytes on a laptop that also holds your cloud tokens, and a pickle or safetensors blob your scanner never saw.

Command

securegit hf search "<query>"
securegit hf info <model-id>
securegit hf pull <model-id>
securegit hf scan <model-id-or-path>
securegit hf push <model-id>
securegit hf pipeline trigger
securegit hf full-pipeline

Search and info first. Read what you are about to materialize — the card, the files, the size — before the pull fills a disk. Pull is the acquire instinct for weights. Scan runs through the red-team bridge (armyknife-redteam). It is a model-oriented pass, not a rebrand of the twelve source scanners. If the binary is missing, you get a clear failure rather than a silent skip.