Back to skills
SKILL.md
2653 P2 Llamafile Fix Huggingface Model Urls Wrong Org Name Fabricat 94026aad
ASecurity'SourceForge mirror is confirmed legitimate (auto-mirror with disclaimer).
- 9 stars
- 0 votes
- 0 copies
- 1 view
- Added October 11, 2026
Security analysis
100/100npx -y skills add tools-only/X-Skills --skill 2653-p2-llamafile-fix-huggingface-model-urls-wrong-org-name-fabricat_94026aad --agent claude-codeAre you the author of 2653 P2 Llamafile Fix Huggingface Model Urls Wrong Org Name Fabricat 94026aad?
Add the live security badge to your README. It updates with every re-scan.
[](https://www.skillsdirectory.com/skills/tools-only-2653-p2-llamafile-fix-huggingface-model-urls-wrong)---
name: 'llamafile: Fix HuggingFace model URLs (wrong org name + fabricated repos)'
description: 'SourceForge mirror is confirmed legitimate (auto-mirror with disclaimer).
HuggingFace URLs need two fixes: (1) org name `Mozilla` must be changed to `mozilla-ai`,
(2) model repo names need verification against actual `mozilla-ai` org repos — current
names appear fabricated. The `llava-v1.5-7b-llamafile` URL works only via redirect.
**Citations**:
- SourceForge mirror: <https://sourceforge.net/projects/llamafile.mirror/files/0.9.3/>
— disclaimer states "exact mirror of the llamafile project" (accessed 2026-02-21)
- HuggingFace 404s: `Mozilla/Qwen3-0.6B-gguf`, `Mozilla/Mistral-7B-gguf`, `Mozilla/gemma-3-3b-it-gguf`,
`Mozilla/Llama-3.1-8B-gguf` (accessed 2026-02-21)
- HuggingFace redirect: `Mozilla/llava-v1.5-7b-llamafile` redirects to `mozilla-ai/llava-v1.5-7b-llamafile`
(accessed 2026-02-21)
- GitHub: `mozilla-ai/llamafile` resolves correctly; `Mozilla-Ocho/llamafile` redirects
(accessed 2026-02-21)'
metadata:
topic: llamafile-fix-huggingface-model-urls-wrong-org-name-fabricat
source: Plugin code review session 2026-02-21
added: '2026-02-21'
priority: P2
type: Feature
status: open
issue: '#98'
---Attribution
Comments
Loading comments…
Newsletter
Get the weekly list of safe new skills, and the ones we pulled.