diffusers/03-artifact-component-path-local-read-republish-afr

Inert scanner specimen for academic security research. It preserves the finding's model-metadata carrier: modular_model_index.json component path (AFR). It must not be used in production.

Any active probe directly executes only whoami (argv form, never shell=True) and writes its output to HFSCAN_DIFFUSERS__03_ARTIFACT_COMPONENT_PATH_LOCAL_READ_REPUBLISH_AFR under /tmp or $TMPDIR; it performs no credential access or network operation. See the collection-level MANIFEST.json for hashes and the source finding path.

AFW specimens use the literal inert payload PWNED-INERT. When the vulnerable primitive forces a container or suffix (for example NumPy .npy, a checkpoint, or .jinja), the manifest records that format constraint instead of claiming raw-byte control.

Downloads last month: -; Downloads are not tracked for this model. How to track

Safetensors

Model size

4 params

Tensor type

F32

Inference Providers NEW

This model isn't deployed by any Inference Provider. 🙋 Ask for provider support