Automic Vault

brew package intelligence

hf

Automic Vault tracks hf because plain text hugging face token matters when AI agents run command-line tools on macOS.

Read docs Run scanner

overview

What Automic Vault knows about hf

Client library for huggingface.co hub

Homepage

Not present in the local metadata.

Commands and aliases

No executable aliases were found in the local package database.

radioisotope

Plain Text Hugging Face Token

Hugging Face Hub stores the active CLI token in ~/.cache/huggingface/token. Our isotope stores that token in the macOS keychain and injects it as HF_TOKEN only while `hf` runs.

Local README excerpt

huggingface-cli Radioisotope

Hugging Face Hub stores the active CLI token in ~/.cache/huggingface/token.

This radioisotope migrates that active token into the Automic Vault keychain and wraps hf so HF_TOKEN is present only while the CLI runs.

Caveats

  • We currently migrate the active token file only.
  • Named stored_tokens entries are not migrated.
  • Direct execution of the original binary will not receive the credentials.

Source: data/radioisotopes/huggingface-cli/README.md

Caveats

  • We currently migrate the active token file only.
  • Named stored_tokens entries are not migrated.
  • Direct execution of the original binary will not receive credentials.

install metadata

Resolver facts

Package keybrew:hf
Last updated2026-05-22T15:57:24Z
Pulseupdated

source trail

Generated from repository data

This page is regenerated by scripts/generate-pkg-pages.py. Deployments refuse to publish if www/pkg/ is stale relative to local package data.

Used sources

  • Nucleus package database
  • local isotope README
  • radioisotope security manifest