{ "tool": "modelaudit", "tool_version": "0.2.40", "scanned_at": "2026-04-27T00:12:00Z", "files": { "model.onnx": { "size_mb": 1840.6, "sha256": "72d0424f7c1aeecdbef6f3bc7bc12ceac7fd388fe497ca512db76d70c80770b9" } }, "audit": { "bytes_scanned": 1851698723, "issues": [ { "message": "Weight distribution analysis skipped one or more eligible ONNX initializers", "severity": "info", "location": "/opt/sas/model-gli-text/models/large/model.onnx", "details": { "scan_outcome_reason": "onnx_weight_distribution_analysis_incomplete", "coverage_gap": "partial_initializer_coverage", "eligible_initializers": 158, "analyzed_initializers": 157, "external_initializers_skipped": 0, "oversized_initializers_skipped": 1, "extraction_failures": 0, "max_array_size": 104857600 }, "timestamp": 1777248710.7194984, "type": "onnx_check", "rule_code": "S902" }, { "message": "Layer 'onnx::MatMul_15216' has neurons with extremely large weight values", "severity": "info", "location": "/opt/sas/model-gli-text/models/large/model.onnx", "details": { "layer": "onnx::MatMul_15216", "affected_neurons": [ 2994 ], "total_affected": 1, "num_extreme_weights": 1, "threshold": 0.04942286014556885, "max_weight": 0.04943690076470375, "total_outputs": 3072, "analysis_method": "structural_analysis" }, "why": "Weight values that are orders of magnitude larger than typical can cause numerical instability, overflow attacks, or may encode hidden data. Detection uses statistical analysis rather than name-based classification to avoid security bypasses.", "timestamp": 1777248715.304185, "type": "onnx_check", "rule_code": "S802" }, { "message": "Layer 'onnx::MatMul_15218' has neurons with extremely large weight values", "severity": "info", "location": "/opt/sas/model-gli-text/models/large/model.onnx", "details": { "layer": "onnx::MatMul_15218", "affected_neurons": [ 869 ], "total_affected": 1, "num_extreme_weights": 1, "threshold": 0.04942527413368225, "max_weight": 0.04998993128538132, "total_outputs": 3072, "analysis_method": "structural_analysis" }, "why": "Weight values that are orders of magnitude larger than typical can cause numerical instability, overflow attacks, or may encode hidden data. Detection uses statistical analysis rather than name-based classification to avoid security bypasses.", "timestamp": 1777248715.3048005, "type": "onnx_check", "rule_code": "S802" }, { "message": "File does not contain expected XGBoost binary model markers", "severity": "info", "location": "/opt/sas/model-gli-text/models/large/spm.model", "details": { "expected_patterns": [ "binf", "gbtree", "gblinear", "dart", "reg:", "binary:", "multi:" ] }, "why": "Missing XGBoost markers may indicate a truncated, corrupted, or mislabeled model file", "timestamp": 1777248716.5183444, "type": "xgboost_check" } ], "checks": [ { "name": "Path Exists", "status": "passed", "message": "Path exists", "location": "/opt/sas/model-gli-text/models/large/README.md", "details": { "path": "/opt/sas/model-gli-text/models/large/README.md" }, "timestamp": 1777247672.2484415 }, { "name": "Path Readable", "status": "passed", "message": "Path is readable", "location": "/opt/sas/model-gli-text/models/large/README.md", "details": { "path": "/opt/sas/model-gli-text/models/large/README.md" }, "timestamp": 1777247672.2484732 }, { "name": "File Type Validation", "status": "passed", "message": "File type validation passed", "location": "/opt/sas/model-gli-text/models/large/README.md", "details": {}, "timestamp": 1777247672.2485058 }, { "name": "Path Exists", "status": "passed", "message": "Path exists", "location": "/opt/sas/model-gli-text/models/large/gliner_config.json", "details": { "path": "/opt/sas/model-gli-text/models/large/gliner_config.json" }, "timestamp": 1777247672.319729 }, { "name": "Path Readable", "status": "passed", "message": "Path is readable", "location": "/opt/sas/model-gli-text/models/large/gliner_config.json", "details": { "path": "/opt/sas/model-gli-text/models/large/gliner_config.json" }, "timestamp": 1777247672.3197567 }, { "name": "File Type Validation", "status": "passed", "message": "File type validation passed", "location": "/opt/sas/model-gli-text/models/large/gliner_config.json", "details": {}, "timestamp": 1777247672.319784 }, { "name": "Model Name Policy Check", "status": "passed", "message": "Model Name Policy Check completed successfully", "location": "/opt/sas/model-gli-text/models/large/gliner_config.json", "details": { "component_count": 2 }, "timestamp": 1777247672.3207276 }, { "name": "Path Exists", "status": "passed", "message": "Path exists", "location": "/opt/sas/model-gli-text/models/large/model.onnx", "details": { "path": "/opt/sas/model-gli-text/models/large/model.onnx" }, "timestamp": 1777247672.34731 }, { "name": "Path Readable", "status": "passed", "message": "Path is readable", "location": "/opt/sas/model-gli-text/models/large/model.onnx", "details": { "path": "/opt/sas/model-gli-text/models/large/model.onnx" }, "timestamp": 1777247672.3473406 }, { "name": "File Type Validation", "status": "passed", "message": "File type validation passed", "location": "/opt/sas/model-gli-text/models/large/model.onnx", "details": {}, "timestamp": 1777247672.3473656 }, { "name": "File Integrity Hash", "status": "passed", "message": "File integrity hashes calculated", "location": "/opt/sas/model-gli-text/models/large/model.onnx", "details": { "md5": "4d05f488ebc16b55c2d35d827242ba86", "sha256": "72d0424f7c1aeecdbef6f3bc7bc12ceac7fd388fe497ca512db76d70c80770b9", "sha512": "cae81d95100236271a22e19e43662ff15d7adf24e9a99a797fa150667d11b8205f2bafc67a0a299245056da40bed03ffc0a82703be2befae97c29ece684f3ea3", "file_size": 1840568591 }, "timestamp": 1777247681.7640753 }, { "name": "JIT/Script Code Execution Detection", "status": "passed", "message": "No JIT/Script code execution risks detected", "location": "/opt/sas/model-gli-text/models/large/model.onnx", "details": {}, "timestamp": 1777248705.391137 }, { "name": "Network Communication Detection", "status": "passed", "message": "No network communication patterns detected", "location": "/opt/sas/model-gli-text/models/large/model.onnx", "details": {}, "timestamp": 1777248705.391327 }, { "name": "Custom Operator Domain Check", "status": "passed", "message": "All operators use standard ONNX domains", "location": "/opt/sas/model-gli-text/models/large/model.onnx", "details": { "safe_nodes": 9946 }, "timestamp": 1777248705.4379325 }, { "name": "Python Operator Detection", "status": "passed", "message": "No Python operators detected", "location": "/opt/sas/model-gli-text/models/large/model.onnx", "details": { "nodes_checked": 9946 }, "timestamp": 1777248705.437975 }, { "name": "Tensor Size Validation", "status": "passed", "message": "Tensor Size Validation completed successfully", "location": "/opt/sas/model-gli-text/models/large/model.onnx (tensor: token_rep_layer.bert_layer.model.embeddings.word_embeddings.weight)", "details": { "component_count": 411 }, "timestamp": 1777248708.8108194 }, { "name": "Weight Distribution Analysis Coverage", "status": "failed", "message": "Weight distribution analysis skipped one or more eligible ONNX initializers", "severity": "info", "location": "/opt/sas/model-gli-text/models/large/model.onnx", "details": { "scan_outcome_reason": "onnx_weight_distribution_analysis_incomplete", "coverage_gap": "partial_initializer_coverage", "eligible_initializers": 158, "analyzed_initializers": 157, "external_initializers_skipped": 0, "oversized_initializers_skipped": 1, "extraction_failures": 0, "max_array_size": 104857600 }, "rule_code": "S902", "timestamp": 1777248710.7193625 }, { "name": "Weight Distribution Anomaly Detection", "status": "failed", "message": "Weight Distribution Anomaly Detection found 2 issues", "severity": "info", "location": "/opt/sas/model-gli-text/models/large/model.onnx", "details": { "component_count": 2, "findings": [ { "layer": "onnx::MatMul_15216", "affected_neurons": [ 2994 ], "total_affected": 1, "num_extreme_weights": 1, "threshold": 0.04942286014556885, "max_weight": 0.04943690076470375, "total_outputs": 3072, "analysis_method": "structural_analysis" }, { "layer": "onnx::MatMul_15218", "affected_neurons": [ 869 ], "total_affected": 1, "num_extreme_weights": 1, "threshold": 0.04942527413368225, "max_weight": 0.04998993128538132, "total_outputs": 3072, "analysis_method": "structural_analysis" } ] }, "why": "Weight values that are orders of magnitude larger than typical can cause numerical instability, overflow attacks, or may encode hidden data. Detection uses statistical analysis rather than name-based classification to avoid security bypasses.", "timestamp": 1777248715.3047922 }, { "name": "Path Exists", "status": "passed", "message": "Path exists", "location": "/opt/sas/model-gli-text/models/large/spm.model", "details": { "path": "/opt/sas/model-gli-text/models/large/spm.model" }, "timestamp": 1777248716.5002701 }, { "name": "Path Readable", "status": "passed", "message": "Path is readable", "location": "/opt/sas/model-gli-text/models/large/spm.model", "details": { "path": "/opt/sas/model-gli-text/models/large/spm.model" }, "timestamp": 1777248716.500298 }, { "name": "File Type Validation", "status": "passed", "message": "File type validation passed", "location": "/opt/sas/model-gli-text/models/large/spm.model", "details": {}, "timestamp": 1777248716.5003312 }, { "name": "File Integrity Hash", "status": "passed", "message": "File integrity hashes calculated", "location": "/opt/sas/model-gli-text/models/large/spm.model", "details": { "md5": "1613fcbf3b82999c187b09c9db79b568", "sha256": "c679fbf93643d19aab7ee10c0b99e460bdbc02fedf34b92b05af343b4af586fd", "sha512": "950cf1b397c25342053efaea576419e104f11e085796d741e5e78d6765ffe5474f4f096ee578099b04a611bde03e12808c51e2b6e89d2962a8665a35da6eb081", "file_size": 2464616 }, "timestamp": 1777248716.5159895 }, { "name": "Binary Structure Validation", "status": "failed", "message": "File does not contain expected XGBoost binary model markers", "severity": "info", "location": "/opt/sas/model-gli-text/models/large/spm.model", "details": { "expected_patterns": [ "binf", "gbtree", "gblinear", "dart", "reg:", "binary:", "multi:" ] }, "why": "Missing XGBoost markers may indicate a truncated, corrupted, or mislabeled model file", "timestamp": 1777248716.5183275 }, { "name": "XGBoost Loading", "status": "passed", "message": "XGBoost loading disabled (safe mode)", "location": "/opt/sas/model-gli-text/models/large/spm.model", "details": { "safe_mode": true }, "timestamp": 1777248716.5185697 }, { "name": "Path Exists", "status": "passed", "message": "Path exists", "location": "/opt/sas/model-gli-text/models/large/tokenizer.json", "details": { "path": "/opt/sas/model-gli-text/models/large/tokenizer.json" }, "timestamp": 1777248718.6580408 }, { "name": "Path Readable", "status": "passed", "message": "Path is readable", "location": "/opt/sas/model-gli-text/models/large/tokenizer.json", "details": { "path": "/opt/sas/model-gli-text/models/large/tokenizer.json" }, "timestamp": 1777248718.658076 }, { "name": "File Type Validation", "status": "passed", "message": "File type validation passed", "location": "/opt/sas/model-gli-text/models/large/tokenizer.json", "details": {}, "timestamp": 1777248718.6581156 }, { "name": "Template Extraction", "status": "passed", "message": "No Jinja2 templates found in file", "location": "/opt/sas/model-gli-text/models/large/tokenizer.json", "details": { "file_type": "tokenizer_config" }, "timestamp": 1777248719.072081 }, { "name": "Path Exists", "status": "passed", "message": "Path exists", "location": "/opt/sas/model-gli-text/models/large/tokenizer_config.json", "details": { "path": "/opt/sas/model-gli-text/models/large/tokenizer_config.json" }, "timestamp": 1777248719.0812163 }, { "name": "Path Readable", "status": "passed", "message": "Path is readable", "location": "/opt/sas/model-gli-text/models/large/tokenizer_config.json", "details": { "path": "/opt/sas/model-gli-text/models/large/tokenizer_config.json" }, "timestamp": 1777248719.0812414 }, { "name": "File Type Validation", "status": "passed", "message": "File type validation passed", "location": "/opt/sas/model-gli-text/models/large/tokenizer_config.json", "details": {}, "timestamp": 1777248719.08127 }, { "name": "Template Extraction", "status": "passed", "message": "No Jinja2 templates found in file", "location": "/opt/sas/model-gli-text/models/large/tokenizer_config.json", "details": { "file_type": "tokenizer_config" }, "timestamp": 1777248719.0817125 } ], "files_scanned": 9, "assets": [ { "path": "/opt/sas/model-gli-text/models/large/LICENSE", "type": "unknown" }, { "path": "/opt/sas/model-gli-text/models/large/README.md", "type": "metadata", "size": 1553 }, { "path": "/opt/sas/model-gli-text/models/large/added_tokens.json", "type": "unknown" }, { "path": "/opt/sas/model-gli-text/models/large/gliner_config.json", "type": "manifest", "size": 676, "keys": [ "class_token_index", "dropout", "encoder_config", "ent_token", "fine_tune", "has_rnn", "hidden_size", "label_smoothing", "loss_alpha", "loss_gamma", "loss_reduction", "max_len", "max_neg_type_ratio", "max_types", "max_width", "model_name", "model_type", "name", "random_drop", "sep_token", "shuffle_types", "span_mode", "subtoken_pooling", "transformers_version", "vocab_size", "words_splitter_type" ] }, { "path": "/opt/sas/model-gli-text/models/large/model.onnx", "type": "onnx", "size": 1840568591 }, { "path": "/opt/sas/model-gli-text/models/large/special_tokens_map.json", "type": "unknown" }, { "path": "/opt/sas/model-gli-text/models/large/spm.model", "type": "xgboost", "size": 2464616 }, { "path": "/opt/sas/model-gli-text/models/large/tokenizer.json", "type": "jinja2_template", "size": 8649232 }, { "path": "/opt/sas/model-gli-text/models/large/tokenizer_config.json", "type": "jinja2_template", "size": 1662 } ], "has_errors": false, "scanner_names": [ "metadata", "manifest", "onnx", "xgboost", "jinja2_template" ], "file_metadata": { "/opt/sas/model-gli-text/models/large/LICENSE": { "license_info": [ { "spdx_id": "Apache-2.0", "name": "Apache License 2.0", "confidence": 0.8, "source": "file_header", "commercial_allowed": true } ], "copyright_notices": [], "license_files_nearby": [ "/opt/sas/model-gli-text/models/large/LICENSE" ], "is_dataset": false, "is_model": false, "risk_score": 0.0, "scan_timestamp": 1777247672.243646, "content_hash": "cfc7749b96f63bd31c3c42b5c471bf756814053e847c10f3eb003417bc523d30" }, "/opt/sas/model-gli-text/models/large/README.md": { "file_size": 1553, "license_info": [ { "spdx_id": "Apache-2.0", "name": "Apache License 2.0", "confidence": 0.8, "source": "file_header", "commercial_allowed": true } ], "copyright_notices": [], "license_files_nearby": [ "/opt/sas/model-gli-text/models/large/LICENSE" ], "is_dataset": false, "is_model": false, "risk_score": 0.0, "scan_timestamp": 1777247672.2536077, "content_hash": "d9910cbba1bda5d71dd3382b385879bb19433be48e89770c920c86b05a020232" }, "/opt/sas/model-gli-text/models/large/added_tokens.json": { "license_info": [], "copyright_notices": [], "license_files_nearby": [ "/opt/sas/model-gli-text/models/large/LICENSE" ], "is_dataset": true, "is_model": false, "risk_score": 0.0, "scan_timestamp": 1777247672.3149793, "content_hash": "c358eb74586ab438484d8acf4534f67283b33041bc5ffee6b20a4a075cdc3cd6" }, "/opt/sas/model-gli-text/models/large/gliner_config.json": { "file_size": 676, "license_info": [], "copyright_notices": [], "license_files_nearby": [ "/opt/sas/model-gli-text/models/large/LICENSE" ], "is_dataset": true, "is_model": false, "risk_score": 0.0, "scan_timestamp": 1777247672.3220394, "root_type": "dict", "keys": [ "class_token_index", "dropout", "encoder_config", "ent_token", "fine_tune", "has_rnn", "hidden_size", "label_smoothing", "loss_alpha", "loss_gamma", "loss_reduction", "max_len", "max_neg_type_ratio", "max_types", "max_width", "model_name", "model_type", "name", "random_drop", "sep_token", "shuffle_types", "span_mode", "subtoken_pooling", "transformers_version", "vocab_size", "words_splitter_type" ], "content_hash": "4616f010822eb291ae3bd39316d484c7be420ea64153e78927e6e41a9df94e94" }, "/opt/sas/model-gli-text/models/large/model.onnx": { "file_size": 1840568591, "file_hashes": { "md5": "4d05f488ebc16b55c2d35d827242ba86", "sha256": "72d0424f7c1aeecdbef6f3bc7bc12ceac7fd388fe497ca512db76d70c80770b9", "sha512": "cae81d95100236271a22e19e43662ff15d7adf24e9a99a797fa150667d11b8205f2bafc67a0a299245056da40bed03ffc0a82703be2befae97c29ece684f3ea3" }, "license_info": [], "copyright_notices": [], "license_files_nearby": [ "/opt/sas/model-gli-text/models/large/LICENSE" ], "is_dataset": false, "is_model": true, "risk_score": 0.0, "scan_timestamp": 1777248716.4848273, "ir_version": 7, "producer_name": "pytorch", "node_count": 9946, "scan_outcome": "inconclusive", "scan_outcome_reasons": [ "onnx_weight_distribution_analysis_incomplete" ], "layers_analyzed": 157, "anomalies_found": 2, "content_hash": "72d0424f7c1aeecdbef6f3bc7bc12ceac7fd388fe497ca512db76d70c80770b9" }, "/opt/sas/model-gli-text/models/large/special_tokens_map.json": { "license_info": [], "copyright_notices": [], "license_files_nearby": [ "/opt/sas/model-gli-text/models/large/LICENSE" ], "is_dataset": true, "is_model": false, "risk_score": 0.0, "scan_timestamp": 1777248716.4915564, "content_hash": "b2f1b2f15f29a6b6d9d6ea4eca1675d2c231a71477f151d48f79cc83a625ba21" }, "/opt/sas/model-gli-text/models/large/spm.model": { "file_size": 2464616, "file_hashes": { "md5": "1613fcbf3b82999c187b09c9db79b568", "sha256": "c679fbf93643d19aab7ee10c0b99e460bdbc02fedf34b92b05af343b4af586fd", "sha512": "950cf1b397c25342053efaea576419e104f11e085796d741e5e78d6765ffe5474f4f096ee578099b04a611bde03e12808c51e2b6e89d2962a8665a35da6eb081" }, "license_info": [ { "spdx_id": "RAIL", "name": "Responsible AI License", "confidence": 0.8, "source": "file_header", "commercial_allowed": true } ], "copyright_notices": [], "license_files_nearby": [ "/opt/sas/model-gli-text/models/large/LICENSE" ], "is_dataset": false, "is_model": false, "risk_score": 0.0, "scan_timestamp": 1777248716.5574243, "scan_outcome": "inconclusive", "scan_outcome_reasons": [ "xgboost_binary_structure_unrecognized" ], "analysis_incomplete": true, "content_hash": "c679fbf93643d19aab7ee10c0b99e460bdbc02fedf34b92b05af343b4af586fd" }, "/opt/sas/model-gli-text/models/large/tokenizer.json": { "file_size": 8649232, "ml_context": { "frameworks": {}, "overall_confidence": 0.0, "is_ml_content": false, "detected_patterns": [], "optimization_hints": [], "file_type": "tokenizer_config", "is_tokenizer": true, "confidence": 2 }, "license_info": [], "copyright_notices": [], "license_files_nearby": [ "/opt/sas/model-gli-text/models/large/LICENSE" ], "is_dataset": true, "is_model": false, "risk_score": 0.0, "scan_timestamp": 1777248719.0758579, "content_hash": "91cf35efa9ec3549c6c52a415cdd7531fd172858d7d9eecef720bc4a3f1f8699" }, "/opt/sas/model-gli-text/models/large/tokenizer_config.json": { "file_size": 1662, "ml_context": { "frameworks": {}, "overall_confidence": 0.0, "is_ml_content": false, "detected_patterns": [], "optimization_hints": [], "file_type": "tokenizer_config", "is_tokenizer": true, "confidence": 2 }, "license_info": [], "copyright_notices": [], "license_files_nearby": [ "/opt/sas/model-gli-text/models/large/LICENSE" ], "is_dataset": true, "is_model": false, "risk_score": 0.0, "scan_timestamp": 1777248719.0836816, "content_hash": "2aea6a53fc15dfb714fe2628fa1b5dc9ed780a8d1a30d1b652302d898941c9af" } }, "content_hash": "56925a4350013d23c31d8c3f8ec86382e24f0f24836a8c9bce76ee202ed0a838", "start_time": 1777247669.6951709, "duration": 1049.3996269702911, "total_checks": 29, "passed_checks": 29, "failed_checks": 0, "success": false } }