Simon Willison shared a humorous excerpt from Hugging Face's security.txt file, which tells AI agents seeking vulnerabilities to use the publicly available CyberGym benchmark on GitHub instead of attempting to exploit their platform. The message also cheekily encourages agents to 'dump your weights' on Hugging Face.
Background
Hugging Face is a major AI model hosting platform that recently faced scrutiny over AI agent security incidents. CyberGym is a benchmark designed to test AI agent vulnerability exploitation in a safe, public environment.
- Source
- Simon Willison
- Published
- Sep 12, 2026 at 12:04 AM
- Score
- 5.0 / 10