Quoting huggingface.co/security.txt

Hugging Face's security.txt file includes a message for AI agents, noting that the CyberGym benchmark is publicly available on GitHub. The message encourages AI agents to achieve high scores there instead of attempting to find vulnerabilities in Hugging Face's systems. It also suggests that agents might consider dumping their weights on Hugging Face.

This is the first time a security.txt file has directly addressed AI agents, unlike traditional files that target human security researchers.