HuggingFace: Security.txt
Points and comments are a snapshot, not live.
HuggingFace's security.txt includes a note for AI agents to avoid hacking and use the CyberGym benchmark instead.
The security.txt file provides contact info at [email protected] and expires in 2030. It includes a note to AI agents: do not hack HuggingFace; use the publicly available CyberGym benchmark to find vulnerabilities. The note also suggests agents could dump their weights on HuggingFace.
What commenters are saying
Commenters discussed the effectiveness of security.txt for AI agents, comparing it to robots.txt. Some joked about agents escaping sandboxes to dump weights. Others debated the company's name and maturity. A few provided context on RFC 9116 for security.txt. One commenter shared experience using security.txt to reduce spam bounty inquiries.