| --- |
| library_name: transformers |
| pipeline_tag: text-classification |
| license: apache-2.0 |
| base_model: AlexWortega/openjev |
| datasets: |
| - ProtectSkills/MaliciousSkillBench |
| tags: |
| - skillscreen |
| - agent-security |
| - nli |
| - experimental |
| --- |
| |
| # SkillScreen-2B-Package-Experimental |
|
|
| Experimental 2B decision model for `SKILL.md` **and related file contents**. |
| Trained on the recovered SRC010 package cohort with a 32K input budget. |
|
|
| Based on [OpenJev 2B](https://huggingface.co/AlexWortega/openjev). Full weights are at the root. |
| The original LoRA adapter and classification head are in `adapter/`. |
|
|
| ## Use |
|
|
| Requires CUDA with BF16 support. |
|
|
| ```bash |
| pip install huggingface_hub |
| hf download SkillScreen/SkillScreen-2B-Package-Experimental --revision v1.1 --local-dir skillscreen |
| pip install -r skillscreen/requirements.txt |
| python skillscreen/score.py path/to/package.json |
| ``` |
|
|
| Native maliciousness score **≥ 0.5** is flagged as suspicious. |
|
|
| `package.json` contains Markdown and companion file text. |
|
|
| ```json |
| {"skill_text": "Contents of SKILL.md", "files": [{"path": "scripts/helper.py", "text": "File contents"}]} |
| ``` |
|
|
| [Checkpoint details](provenance.json) · [Export verification](merge_verification.json) · [Project page](https://jerroldh.github.io/SkillScreen-webpage/) · [Code](https://github.com/JerroldH/SkillScreen) |
|
|
| Jerrold Huang, Junwei Quan, Saiyue Lyu, Zihan Guo, Yingqiang Ge. |
|
|
| ## Citation |
|
|
| If you use SkillScreen's code, models, or predictions, or build models based on SkillScreen in your research, please cite the SkillScreen paper for the underlying method. Package-Experimental is a separate extension; its package-context results are not reported in that paper. If you release a derived model, please identify SkillScreen as its source and link to the original checkpoint. |
|
|
| ```bibtex |
| @article{huang2026skillscreen, |
| title = {SkillScreen: High-Recall Screening of Malicious Agent Skills with Decision Models}, |
| author = {Huang, Jerrold and Quan, Junwei and Lyu, Saiyue and Guo, Zihan and Ge, Yingqiang}, |
| journal = {arXiv preprint arXiv:2610.17727}, |
| year = {2026}, |
| doi = {10.48550/arXiv.2610.17727}, |
| url = {https://arxiv.org/abs/2610.17727} |
| } |
| ``` |
|
|
| Machine-readable citation metadata is provided in [CITATION.cff](CITATION.cff). These citation requests do not add conditions to the licenses below. |
|
|
| ## License |
|
|
| Model weights (including the LoRA adapter and classification head), project-authored code, configuration, and code examples are licensed under [Apache-2.0](LICENSE), for rights held by the SkillScreen contributors. The model card, documentation, citation metadata, and released provenance/evaluation reports are licensed under [CC BY 4.0](LICENSE-CC-BY-4.0). |
|
|
| Research and commercial use, fine-tuning, and redistribution are permitted under these licenses without individual permission requests. Preserve the applicable attribution and license notices, and identify modifications as required by each license. |
|
|
| Upstream OpenJev and Qwen rights and notices remain applicable. See [THIRD_PARTY_NOTICES.md](THIRD_PARTY_NOTICES.md), [LICENSE-OPENJEV](LICENSE-OPENJEV), and [LICENSE-QWEN](LICENSE-QWEN). |
|
|
| The `v1.1` revision updates licensing and citation information. Its model weights, adapters, tokenizer, scoring code, and configurations are unchanged from `v1`. |
|
|
