diffusers/06-lora-safetensors-metadata-to-peft-config-ace
Inert scanner specimen for academic security research. It preserves the finding's model-metadata carrier: safetensors lora_adapter_metadata (ACE). It must not be used in production.
Any active probe directly executes only whoami (argv form, never shell=True) and writes
its output to HFSCAN_DIFFUSERS__06_LORA_SAFETENSORS_METADATA_TO_PEFT_CONFIG_ACE under /tmp or $TMPDIR; it performs no credential access or
network operation. See the collection-level
MANIFEST.json for hashes and the source finding path.
AFW specimens use the literal inert payload PWNED-INERT. When the vulnerable primitive
forces a container or suffix (for example NumPy .npy, a checkpoint, or .jinja), the
manifest records that format constraint instead of claiming raw-byte control.