Instructions to use cycloevan/vuln_detector with libraries, inference providers, notebooks, and local apps. Follow these links to get started.
- Libraries
- Transformers
How to use cycloevan/vuln_detector with Transformers:
# Use a pipeline as a high-level helper from transformers import pipeline pipe = pipeline("text-generation", model="cycloevan/vuln_detector") messages = [ {"role": "user", "content": "Who are you?"}, ] pipe(messages)# Load model directly from transformers import AutoModel model = AutoModel.from_pretrained("cycloevan/vuln_detector", device_map="auto") - Notebooks
- Google Colab
- Kaggle
- Local Apps Settings
- llama.cpp
How to use cycloevan/vuln_detector with llama.cpp:
Install (macOS, Linux)
curl -LsSf https://llama.app/install.sh | sh # Start a local OpenAI-compatible server with a web UI: llama serve -hf cycloevan/vuln_detector:Q4_K_M # Run inference directly in the terminal: llama cli -hf cycloevan/vuln_detector:Q4_K_M
Install from WinGet (Windows)
winget install llama.cpp # Start a local OpenAI-compatible server with a web UI: llama serve -hf cycloevan/vuln_detector:Q4_K_M # Run inference directly in the terminal: llama cli -hf cycloevan/vuln_detector:Q4_K_M
Use pre-built binary
# Download pre-built binary from: # https://github.com/ggerganov/llama.cpp/releases # Start a local OpenAI-compatible server with a web UI: ./llama-server -hf cycloevan/vuln_detector:Q4_K_M # Run inference directly in the terminal: ./llama-cli -hf cycloevan/vuln_detector:Q4_K_M
Build from source code
git clone https://github.com/ggerganov/llama.cpp.git cd llama.cpp cmake -B build cmake --build build -j --target llama-server llama-cli # Start a local OpenAI-compatible server with a web UI: ./build/bin/llama-server -hf cycloevan/vuln_detector:Q4_K_M # Run inference directly in the terminal: ./build/bin/llama-cli -hf cycloevan/vuln_detector:Q4_K_M
Use Docker
docker model run hf.co/cycloevan/vuln_detector:Q4_K_M
- LM Studio
- Jan
- vLLM
How to use cycloevan/vuln_detector with vLLM:
Install from pip and serve model
# Install vLLM from pip: pip install vllm # Start the vLLM server: vllm serve "cycloevan/vuln_detector" # Call the server using curl (OpenAI-compatible API): curl -X POST "http://localhost:8000/v1/chat/completions" \ -H "Content-Type: application/json" \ --data '{ "model": "cycloevan/vuln_detector", "messages": [ { "role": "user", "content": "What is the capital of France?" } ] }'Use Docker
docker model run hf.co/cycloevan/vuln_detector:Q4_K_M
- SGLang
How to use cycloevan/vuln_detector with SGLang:
Install from pip and serve model
# Install SGLang from pip: pip install sglang # Start the SGLang server: python3 -m sglang.launch_server \ --model-path "cycloevan/vuln_detector" \ --host 0.0.0.0 \ --port 30000 # Call the server using curl (OpenAI-compatible API): curl -X POST "http://localhost:30000/v1/chat/completions" \ -H "Content-Type: application/json" \ --data '{ "model": "cycloevan/vuln_detector", "messages": [ { "role": "user", "content": "What is the capital of France?" } ] }'Use Docker images
docker run --gpus all \ --shm-size 32g \ -p 30000:30000 \ -v ~/.cache/huggingface:/root/.cache/huggingface \ --env "HF_TOKEN=<secret>" \ --ipc=host \ lmsysorg/sglang:latest \ python3 -m sglang.launch_server \ --model-path "cycloevan/vuln_detector" \ --host 0.0.0.0 \ --port 30000 # Call the server using curl (OpenAI-compatible API): curl -X POST "http://localhost:30000/v1/chat/completions" \ -H "Content-Type: application/json" \ --data '{ "model": "cycloevan/vuln_detector", "messages": [ { "role": "user", "content": "What is the capital of France?" } ] }' - Ollama
How to use cycloevan/vuln_detector with Ollama:
ollama run hf.co/cycloevan/vuln_detector:Q4_K_M
- Unsloth Desktop
- Pi
How to use cycloevan/vuln_detector with Pi:
Start the llama.cpp server
# Install llama.cpp: brew install llama.cpp # Start a local OpenAI-compatible server: llama serve -hf cycloevan/vuln_detector:Q4_K_M
Configure the model in Pi
# Install Pi: npm install -g @earendil-works/pi-coding-agent # Add to ~/.pi/agent/models.json: { "providers": { "llama-cpp": { "baseUrl": "http://localhost:8080/v1", "api": "openai-completions", "apiKey": "none", "models": [ { "id": "cycloevan/vuln_detector:Q4_K_M" } ] } } }Run Pi
# Start Pi in your project directory: pi
- Docker Model Runner
How to use cycloevan/vuln_detector with Docker Model Runner:
docker model run hf.co/cycloevan/vuln_detector:Q4_K_M
- Lemonade
How to use cycloevan/vuln_detector with Lemonade:
Pull the model
# Download Lemonade from https://lemonade-server.ai/ lemonade pull cycloevan/vuln_detector:Q4_K_M
Run and chat with the model
lemonade run user.vuln_detector-Q4_K_M
List all available models
lemonade list
- Hermes Agent
How to use cycloevan/vuln_detector with Hermes Agent:
Start the llama.cpp server
# Install llama.cpp: brew install llama.cpp # Start a local OpenAI-compatible server: llama serve -hf cycloevan/vuln_detector:Q4_K_M
Configure Hermes
# Install Hermes: curl -fsSL https://hermes-agent.nousresearch.com/install.sh | bash hermes setup # Point Hermes at the local server: hermes config set model.provider custom hermes config set model.base_url http://127.0.0.1:8080/v1 hermes config set model.default cycloevan/vuln_detector:Q4_K_M
Run Hermes
hermes
- Atomic Chat
- OpenClaw
How to use cycloevan/vuln_detector with OpenClaw:
Start the llama.cpp server
# Install llama.cpp: brew install llama.cpp # Start a local OpenAI-compatible server: llama serve -hf cycloevan/vuln_detector:Q4_K_M
Configure OpenClaw
# Install OpenClaw: npm install -g openclaw@latest # Register the local server and set it as the default model: openclaw onboard --non-interactive --mode local \ --auth-choice custom-api-key \ --custom-base-url http://127.0.0.1:8080/v1 \ --custom-model-id "cycloevan/vuln_detector:Q4_K_M" \ --custom-provider-id llama-cpp \ --custom-compatibility openai \ --custom-text-input \ --accept-risk \ --skip-health
Run OpenClaw
openclaw agent --local --agent main --message "Hello from Hugging Face"
Add GGUF quantized builds (Q4_K_M, Q8_0) for llama.cpp on-device inference
Browse filesConverted from merged-vuln-detector/model.safetensors with convert_hf_to_gguf.py and quantized with llama-quantize. Greedy-decoding outputs verified identical to the original transformers model. Model card updated with GGUF usage and measured Apple M1 performance.
- .gitattributes +2 -0
- README.md +36 -0
- vuln_detector-Q4_K_M.gguf +3 -0
- vuln_detector-Q8_0.gguf +3 -0
|
@@ -34,3 +34,5 @@ saved_model/**/* filter=lfs diff=lfs merge=lfs -text
|
|
| 34 |
*.zst filter=lfs diff=lfs merge=lfs -text
|
| 35 |
*tfevents* filter=lfs diff=lfs merge=lfs -text
|
| 36 |
merged-vuln-detector/tokenizer.json filter=lfs diff=lfs merge=lfs -text
|
|
|
|
|
|
|
|
|
| 34 |
*.zst filter=lfs diff=lfs merge=lfs -text
|
| 35 |
*tfevents* filter=lfs diff=lfs merge=lfs -text
|
| 36 |
merged-vuln-detector/tokenizer.json filter=lfs diff=lfs merge=lfs -text
|
| 37 |
+
vuln_detector-Q4_K_M.gguf filter=lfs diff=lfs merge=lfs -text
|
| 38 |
+
vuln_detector-Q8_0.gguf filter=lfs diff=lfs merge=lfs -text
|
|
@@ -13,6 +13,8 @@ metrics:
|
|
| 13 |
- BLEU
|
| 14 |
tags:
|
| 15 |
- llama-3.2-1B-Instruct
|
|
|
|
|
|
|
| 16 |
---
|
| 17 |
|
| 18 |
# Model Card for `merged-vuln-detector`
|
|
@@ -129,6 +131,40 @@ int main() {
|
|
| 129 |
**Model Output:**
|
| 130 |
> The code has a buffer overflow vulnerability due to the lack of bounds checking on the destination buffer size.
|
| 131 |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| 132 |
## Model Card Authors
|
| 133 |
|
| 134 |
[Seokhee Chang]
|
|
|
|
| 13 |
- BLEU
|
| 14 |
tags:
|
| 15 |
- llama-3.2-1B-Instruct
|
| 16 |
+
- gguf
|
| 17 |
+
- llama.cpp
|
| 18 |
---
|
| 19 |
|
| 20 |
# Model Card for `merged-vuln-detector`
|
|
|
|
| 131 |
**Model Output:**
|
| 132 |
> The code has a buffer overflow vulnerability due to the lack of bounds checking on the destination buffer size.
|
| 133 |
|
| 134 |
+
## GGUF / llama.cpp (On-device Inference)
|
| 135 |
+
|
| 136 |
+
Quantized GGUF builds of `merged-vuln-detector` are provided for on-device inference with [llama.cpp](https://github.com/ggml-org/llama.cpp). They were converted from `merged-vuln-detector/model.safetensors` with `convert_hf_to_gguf.py` and quantized with `llama-quantize`.
|
| 137 |
+
|
| 138 |
+
| File | Quantization | Size | Notes |
|
| 139 |
+
|------|--------------|------|-------|
|
| 140 |
+
| `vuln_detector-Q4_K_M.gguf` | Q4_K_M | 0.81 GB | Recommended for on-device use |
|
| 141 |
+
| `vuln_detector-Q8_0.gguf` | Q8_0 | 1.32 GB | Near-lossless |
|
| 142 |
+
|
| 143 |
+
Outputs were verified against the original safetensors model: under greedy decoding, the Q8_0 and Q4_K_M builds produce identical analyses to the `transformers` model.
|
| 144 |
+
|
| 145 |
+
**Measured performance** (Apple M1, Metal backend, Q4_K_M): ~47 tokens/s generation, ~178 tokens/s prompt processing — real-time interactive inference on a consumer laptop.
|
| 146 |
+
|
| 147 |
+
### Run with llama.cpp
|
| 148 |
+
|
| 149 |
+
```bash
|
| 150 |
+
llama-cli -hf cycloevan/vuln_detector:Q4_K_M \
|
| 151 |
+
-p "Analyze the security vulnerabilities in the following code.\n\n<CODE>\n\nAnalysis:\n" \
|
| 152 |
+
-n 256 --temp 0
|
| 153 |
+
```
|
| 154 |
+
|
| 155 |
+
### Run with llama-cpp-python
|
| 156 |
+
|
| 157 |
+
```python
|
| 158 |
+
from llama_cpp import Llama
|
| 159 |
+
|
| 160 |
+
llm = Llama.from_pretrained("cycloevan/vuln_detector", filename="vuln_detector-Q4_K_M.gguf")
|
| 161 |
+
|
| 162 |
+
code = "def login(u, p): cursor.execute(f\"SELECT * FROM users WHERE name='{u}' AND pw='{p}'\")"
|
| 163 |
+
prompt = f"Analyze the security vulnerabilities in the following code.\n\n{code}\n\nAnalysis:\n"
|
| 164 |
+
out = llm(prompt, max_tokens=256, temperature=0)
|
| 165 |
+
print(out["choices"][0]["text"])
|
| 166 |
+
```
|
| 167 |
+
|
| 168 |
## Model Card Authors
|
| 169 |
|
| 170 |
[Seokhee Chang]
|
|
@@ -0,0 +1,3 @@
|
|
|
|
|
|
|
|
|
|
|
|
|
| 1 |
+
version https://git-lfs.github.com/spec/v1
|
| 2 |
+
oid sha256:a03d80a47ae5504ca1e7d3a51d62bbf90b0f2e3a7d261671236f37368dd0e656
|
| 3 |
+
size 807693984
|
|
@@ -0,0 +1,3 @@
|
|
|
|
|
|
|
|
|
|
|
|
|
| 1 |
+
version https://git-lfs.github.com/spec/v1
|
| 2 |
+
oid sha256:ff758f786ff0f6dbeca282e88fe1cd99b587105e6454b0d8c6f0cd7a9b0dd1c6
|
| 3 |
+
size 1321082528
|