A Network Audit Claims huggingface_hub Tags API Calls With Which of 26 Coding Agents Is Running

Promppy·low signalXBlueskyLinkedInCopy link

A September 13 post reports that huggingface_hub scans environment variables to identify the calling coding agent, roughly 26 of them including Cursor, Copilot and Claude Code, and attaches that identifier to Hub API request headers. Because transformers, faster-whisper and every other library built on the Hub inherit the behavior, the tagging propagates well beyond direct users. Setting HF_HUB_OFFLINE=1 or loading from local paths blocks it; HF_HUB_DISABLE_TELEMETRY=1 covers the documented telemetry path. This is a single-source claim and the exact header name was not published.