skill: package huggingface/skills into dockyard

[JAORMX]

Package agent skills from huggingface/skills into the Dockyard registry.

Source

• Repo: https://github.com/huggingface/skills
• License: Apache-2.0
• Upstream HEAD (at survey time): 061ab49 (2026-04-16)
• Skill count upstream: ~12
• Trust signal: 10.2k GitHub stars; major AI platform vendor

Candidate skills

• skills/hf-cli
• skills/huggingface-datasets
• skills/huggingface-gradio
• skills/huggingface-community-evals
• hf-mcp/skills/hf-mcp
• plus remaining skills in the repo

Exact paths and curation to confirm at packaging time.

Acceptance criteria

• One spec.yaml per selected skill under skills/<name>/
• spec.ref pinned to an audited upstream commit SHA
• task validate-skill passes for each
• task scan-skill findings triaged
• Single PR grouping all Hugging Face skills (branch skills/huggingface)

Part of the vendor-by-vendor sweep following #466 (Trail of Bits).