diff --git a/skills/remove-ai-marks/scripts/requirements-ctrlregen.txt b/skills/remove-ai-marks/scripts/requirements-ctrlregen.txt
index b7166b5..70c64e5 100644
--- a/skills/remove-ai-marks/scripts/requirements-ctrlregen.txt
+++ b/skills/remove-ai-marks/scripts/requirements-ctrlregen.txt
@@ -27,6 +27,6 @@ safetensors==0.8.0
 # huggingface_hub must stay <=0.25.0: 0.26.0+ removed the cached_download
 # symbol that diffusers 0.27.2 still imports. Unpinned, pip resolves latest
 # (0.36.2) and the backend fails to import.
-huggingface_hub==0.24.0
+huggingface_hub==1.28.0
 Pillow==12.3.0
 piexif==1.1.3
diff --git a/skills/remove-ai-marks/scripts/requirements-markllm.txt b/skills/remove-ai-marks/scripts/requirements-markllm.txt
index db66029..6c5f7d6 100644
--- a/skills/remove-ai-marks/scripts/requirements-markllm.txt
+++ b/skills/remove-ai-marks/scripts/requirements-markllm.txt
@@ -30,5 +30,5 @@ matplotlib==3.11.1
 Cython==3.2.9
 numpy==2.5.2
 scipy==1.18.0
-huggingface_hub==1.27.0
+huggingface_hub==1.28.0
 Pillow==12.3.0