# Unsafe classification and false-positive

**URL:** </static-proxy?url=https%3A%2F%2Fdiscuss.huggingface.co%2Ft%2Funsafe-classification-and-false-positive%2F176147%3E%5C
**Category:** Site Feedback\
**Created:** [May 21, 2026, 1:07pm UTC](/static-proxy?url=https%3A%2F%2Fdiscuss.huggingface.co%2Ft%2Funsafe-classification-and-false-positive%2F176147 "2026-05-21T13:07:21Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![adulau](https://sea2.discourse-cdn.com/hellohellohello/user_avatar/discuss.huggingface.co/adulau/32/60358_2.png) [@adulau](/static-proxy?url=https%3A%2F%2Fdiscuss.huggingface.co%2Fu%2Fadulau)%5C
**Post date:** [May 21, 2026, 1:07pm UTC](/static-proxy?url=https%3A%2F%2Fdiscuss.huggingface.co%2Ft%2Funsafe-classification-and-false-positive%2F176147%2F1 "2026-05-21T13:07:22Z")

</div>

We recently seen an unsafe warning on some of our repositories such as [CIRCL/vulnerability-severity-classification-roberta-base · Hugging Face](https://huggingface.co/CIRCL/vulnerability-severity-classification-roberta-base) and we are pretty sure it’s a false-positive.

What’s the procedure at Huggingface and where to notify that is a false-positive?

---

<div class="post-metadata">

**Author:** ![John6666](https://sea2.discourse-cdn.com/hellohellohello/user_avatar/discuss.huggingface.co/john6666/32/27664_2.png) [@John6666](/static-proxy?url=https%3A%2F%2Fdiscuss.huggingface.co%2Fu%2FJohn6666)%5C
**Post date:** [May 22, 2026, 2:11am UTC](/static-proxy?url=https%3A%2F%2Fdiscuss.huggingface.co%2Ft%2Funsafe-classification-and-false-positive%2F176147%2F2 "2026-05-22T02:11:33Z")

</div>

I don’t know much about the procedures for false positives, but I think it’s probably this:  
[https://huggingface.co/docs/hub/security-pickle](https://huggingface.co/docs/hub/security-pickle)

> _ **Disclaimer** _ : this is not 100% foolproof. It is your responsibility as a user to check if something is safe or not. We are not actively auditing python packages for safety, the safe/unsafe imports lists we have are maintained in a best-effort manner. Please contact us if you think something is not safe, and we flag it as such, by sending us an email to website at [huggingface.co](http://huggingface.co)