{ "tool": "modelaudit", "tool_version": "0.2.40", "scanned_at": "2026-04-27T01:25:18Z", "files": { "model.onnx": { "size_mb": 1157.1, "sha256": "0772f22e05659aa5c10117350d7143f51272002f8f7d65c5fd430439be180b49" } }, "audit": { "bytes_scanned": 1177808384, "issues": [ { "message": "Weight distribution analysis skipped one or more eligible ONNX initializers", "severity": "info", "location": "/opt/sas/model-gli-text/models/pii-base/model.onnx", "details": { "scan_outcome_reason": "onnx_weight_distribution_analysis_incomplete", "coverage_gap": "partial_initializer_coverage", "eligible_initializers": 86, "analyzed_initializers": 85, "external_initializers_skipped": 0, "oversized_initializers_skipped": 1, "extraction_failures": 0, "max_array_size": 104857600 }, "timestamp": 1777253108.5796685, "type": "onnx_check", "rule_code": "S902" }, { "message": "Layer 'onnx::LSTM_7932' has neurons with extremely large weight values", "severity": "info", "location": "/opt/sas/model-gli-text/models/pii-base/model.onnx", "details": { "layer": "onnx::LSTM_7932", "affected_neurons": [ 470, 1739 ], "total_affected": 2, "num_extreme_weights": 2, "threshold": 0.08667954057455063, "max_weight": 0.09787363559007645, "total_outputs": 2048, "analysis_method": "structural_analysis" }, "why": "Weight values that are orders of magnitude larger than typical can cause numerical instability, overflow attacks, or may encode hidden data. Detection uses statistical analysis rather than name-based classification to avoid security bypasses.", "timestamp": 1777253111.7971828, "type": "onnx_check", "rule_code": "S802" }, { "message": "File does not contain expected XGBoost binary model markers", "severity": "info", "location": "/opt/sas/model-gli-text/models/pii-base/spm.model", "details": { "expected_patterns": [ "binf", "gbtree", "gblinear", "dart", "reg:", "binary:", "multi:" ] }, "why": "Missing XGBoost markers may indicate a truncated, corrupted, or mislabeled model file", "timestamp": 1777253112.7490187, "type": "xgboost_check" } ], "checks": [ { "name": "Path Exists", "status": "passed", "message": "Path exists", "location": "/opt/sas/model-gli-text/models/pii-base/README.md", "details": { "path": "/opt/sas/model-gli-text/models/pii-base/README.md" }, "timestamp": 1777252460.7176414 }, { "name": "Path Readable", "status": "passed", "message": "Path is readable", "location": "/opt/sas/model-gli-text/models/pii-base/README.md", "details": { "path": "/opt/sas/model-gli-text/models/pii-base/README.md" }, "timestamp": 1777252460.717671 }, { "name": "File Type Validation", "status": "passed", "message": "File type validation passed", "location": "/opt/sas/model-gli-text/models/pii-base/README.md", "details": {}, "timestamp": 1777252460.7177079 }, { "name": "Path Exists", "status": "passed", "message": "Path exists", "location": "/opt/sas/model-gli-text/models/pii-base/gliner_config.json", "details": { "path": "/opt/sas/model-gli-text/models/pii-base/gliner_config.json" }, "timestamp": 1777252460.7864325 }, { "name": "Path Readable", "status": "passed", "message": "Path is readable", "location": "/opt/sas/model-gli-text/models/pii-base/gliner_config.json", "details": { "path": "/opt/sas/model-gli-text/models/pii-base/gliner_config.json" }, "timestamp": 1777252460.786461 }, { "name": "File Type Validation", "status": "passed", "message": "File type validation passed", "location": "/opt/sas/model-gli-text/models/pii-base/gliner_config.json", "details": {}, "timestamp": 1777252460.7864888 }, { "name": "Model Name Policy Check", "status": "passed", "message": "Model Name Policy Check completed successfully", "location": "/opt/sas/model-gli-text/models/pii-base/gliner_config.json", "details": { "component_count": 2 }, "timestamp": 1777252460.7879534 }, { "name": "Path Exists", "status": "passed", "message": "Path exists", "location": "/opt/sas/model-gli-text/models/pii-base/model.onnx", "details": { "path": "/opt/sas/model-gli-text/models/pii-base/model.onnx" }, "timestamp": 1777252460.8143609 }, { "name": "Path Readable", "status": "passed", "message": "Path is readable", "location": "/opt/sas/model-gli-text/models/pii-base/model.onnx", "details": { "path": "/opt/sas/model-gli-text/models/pii-base/model.onnx" }, "timestamp": 1777252460.8143888 }, { "name": "File Type Validation", "status": "passed", "message": "File type validation passed", "location": "/opt/sas/model-gli-text/models/pii-base/model.onnx", "details": {}, "timestamp": 1777252460.8144133 }, { "name": "File Integrity Hash", "status": "passed", "message": "File integrity hashes calculated", "location": "/opt/sas/model-gli-text/models/pii-base/model.onnx", "details": { "md5": "c2bd82d04391e7d258e24cdd318fe3be", "sha256": "0772f22e05659aa5c10117350d7143f51272002f8f7d65c5fd430439be180b49", "sha512": "4c5f287b1e1a5c02c523f5f943b2bf115ec592972f7a3d9e8b51409ad3f81e70bdb5bd5337200e41201cd66b6e9e311b33158a41e01f1cc6e8a80872441458fd", "file_size": 1157115210 }, "timestamp": 1777252466.8216245 }, { "name": "JIT/Script Code Execution Detection", "status": "passed", "message": "No JIT/Script code execution risks detected", "location": "/opt/sas/model-gli-text/models/pii-base/model.onnx", "details": {}, "timestamp": 1777253105.225615 }, { "name": "Network Communication Detection", "status": "passed", "message": "No network communication patterns detected", "location": "/opt/sas/model-gli-text/models/pii-base/model.onnx", "details": {}, "timestamp": 1777253105.225793 }, { "name": "Custom Operator Domain Check", "status": "passed", "message": "All operators use standard ONNX domains", "location": "/opt/sas/model-gli-text/models/pii-base/model.onnx", "details": { "safe_nodes": 5173 }, "timestamp": 1777253105.2503717 }, { "name": "Python Operator Detection", "status": "passed", "message": "No Python operators detected", "location": "/opt/sas/model-gli-text/models/pii-base/model.onnx", "details": { "nodes_checked": 5173 }, "timestamp": 1777253105.250458 }, { "name": "Tensor Size Validation", "status": "passed", "message": "Tensor Size Validation completed successfully", "location": "/opt/sas/model-gli-text/models/pii-base/model.onnx (tensor: token_rep_layer.bert_layer.model.embeddings.word_embeddings.weight)", "details": { "component_count": 219 }, "timestamp": 1777253108.2908776 }, { "name": "Weight Distribution Analysis Coverage", "status": "failed", "message": "Weight distribution analysis skipped one or more eligible ONNX initializers", "severity": "info", "location": "/opt/sas/model-gli-text/models/pii-base/model.onnx", "details": { "scan_outcome_reason": "onnx_weight_distribution_analysis_incomplete", "coverage_gap": "partial_initializer_coverage", "eligible_initializers": 86, "analyzed_initializers": 85, "external_initializers_skipped": 0, "oversized_initializers_skipped": 1, "extraction_failures": 0, "max_array_size": 104857600 }, "rule_code": "S902", "timestamp": 1777253108.5795164 }, { "name": "Weight Distribution Anomaly Detection", "status": "failed", "message": "Layer 'onnx::LSTM_7932' has neurons with extremely large weight values", "severity": "info", "location": "/opt/sas/model-gli-text/models/pii-base/model.onnx", "details": { "layer": "onnx::LSTM_7932", "affected_neurons": [ 470, 1739 ], "total_affected": 2, "num_extreme_weights": 2, "threshold": 0.08667954057455063, "max_weight": 0.09787363559007645, "total_outputs": 2048, "analysis_method": "structural_analysis" }, "why": "Weight values that are orders of magnitude larger than typical can cause numerical instability, overflow attacks, or may encode hidden data. Detection uses statistical analysis rather than name-based classification to avoid security bypasses.", "rule_code": "S802", "timestamp": 1777253111.797149 }, { "name": "Path Exists", "status": "passed", "message": "Path exists", "location": "/opt/sas/model-gli-text/models/pii-base/spm.model", "details": { "path": "/opt/sas/model-gli-text/models/pii-base/spm.model" }, "timestamp": 1777253112.7195747 }, { "name": "Path Readable", "status": "passed", "message": "Path is readable", "location": "/opt/sas/model-gli-text/models/pii-base/spm.model", "details": { "path": "/opt/sas/model-gli-text/models/pii-base/spm.model" }, "timestamp": 1777253112.7196033 }, { "name": "File Type Validation", "status": "passed", "message": "File type validation passed", "location": "/opt/sas/model-gli-text/models/pii-base/spm.model", "details": {}, "timestamp": 1777253112.7196317 }, { "name": "File Integrity Hash", "status": "passed", "message": "File integrity hashes calculated", "location": "/opt/sas/model-gli-text/models/pii-base/spm.model", "details": { "md5": "b4ca07289eac48600b29529119d565e2", "sha256": "13c8d666d62a7bc4ac8f040aab68e942c861f93303156cc28f5c7e885d86d6e3", "sha512": "33338f21f4b98563d99e4849dd1dc08869453389e5269d7da7bae06f65014cda04ff66ab2ccabe84260f75b8752f922cdbc4f9a6448f0cf78521ff6f902d7bf1", "file_size": 4305025 }, "timestamp": 1777253112.746772 }, { "name": "Binary Structure Validation", "status": "failed", "message": "File does not contain expected XGBoost binary model markers", "severity": "info", "location": "/opt/sas/model-gli-text/models/pii-base/spm.model", "details": { "expected_patterns": [ "binf", "gbtree", "gblinear", "dart", "reg:", "binary:", "multi:" ] }, "why": "Missing XGBoost markers may indicate a truncated, corrupted, or mislabeled model file", "timestamp": 1777253112.7489972 }, { "name": "XGBoost Loading", "status": "passed", "message": "XGBoost loading disabled (safe mode)", "location": "/opt/sas/model-gli-text/models/pii-base/spm.model", "details": { "safe_mode": true }, "timestamp": 1777253112.7492428 }, { "name": "Path Exists", "status": "passed", "message": "Path exists", "location": "/opt/sas/model-gli-text/models/pii-base/tokenizer.json", "details": { "path": "/opt/sas/model-gli-text/models/pii-base/tokenizer.json" }, "timestamp": 1777253116.7768757 }, { "name": "Path Readable", "status": "passed", "message": "Path is readable", "location": "/opt/sas/model-gli-text/models/pii-base/tokenizer.json", "details": { "path": "/opt/sas/model-gli-text/models/pii-base/tokenizer.json" }, "timestamp": 1777253116.7769153 }, { "name": "File Type Validation", "status": "passed", "message": "File type validation passed", "location": "/opt/sas/model-gli-text/models/pii-base/tokenizer.json", "details": {}, "timestamp": 1777253116.7769544 }, { "name": "Template Extraction", "status": "passed", "message": "No Jinja2 templates found in file", "location": "/opt/sas/model-gli-text/models/pii-base/tokenizer.json", "details": { "file_type": "tokenizer_config" }, "timestamp": 1777253117.7028167 }, { "name": "Path Exists", "status": "passed", "message": "Path exists", "location": "/opt/sas/model-gli-text/models/pii-base/tokenizer_config.json", "details": { "path": "/opt/sas/model-gli-text/models/pii-base/tokenizer_config.json" }, "timestamp": 1777253117.7154028 }, { "name": "Path Readable", "status": "passed", "message": "Path is readable", "location": "/opt/sas/model-gli-text/models/pii-base/tokenizer_config.json", "details": { "path": "/opt/sas/model-gli-text/models/pii-base/tokenizer_config.json" }, "timestamp": 1777253117.7154307 }, { "name": "File Type Validation", "status": "passed", "message": "File type validation passed", "location": "/opt/sas/model-gli-text/models/pii-base/tokenizer_config.json", "details": {}, "timestamp": 1777253117.7154608 }, { "name": "Template Extraction", "status": "passed", "message": "No Jinja2 templates found in file", "location": "/opt/sas/model-gli-text/models/pii-base/tokenizer_config.json", "details": { "file_type": "tokenizer_config" }, "timestamp": 1777253117.7165403 } ], "files_scanned": 9, "assets": [ { "path": "/opt/sas/model-gli-text/models/pii-base/LICENSE", "type": "unknown" }, { "path": "/opt/sas/model-gli-text/models/pii-base/README.md", "type": "metadata", "size": 1524 }, { "path": "/opt/sas/model-gli-text/models/pii-base/added_tokens.json", "type": "unknown" }, { "path": "/opt/sas/model-gli-text/models/pii-base/gliner_config.json", "type": "manifest", "size": 3352, "keys": [ "class_token_index", "dropout", "embed_ent_token", "encoder_config", "ent_token", "eval_every", "fine_tune", "fuse_layers", "has_rnn", "hidden_size", "labels_encoder", "labels_encoder_config", "lr_encoder", "lr_others", "max_len", "max_neg_type_ratio", "max_types", "max_width", "model_name", "model_type", "name", "num_post_fusion_layers", "num_steps", "post_fusion_schema", "random_drop", "sep_token", "shuffle_types", "size_sup", "span_mode", "subtoken_pooling", "train_batch_size", "transformers_version", "vocab_size", "warmup_ratio", "words_splitter_type" ] }, { "path": "/opt/sas/model-gli-text/models/pii-base/model.onnx", "type": "onnx", "size": 1157115210 }, { "path": "/opt/sas/model-gli-text/models/pii-base/special_tokens_map.json", "type": "unknown" }, { "path": "/opt/sas/model-gli-text/models/pii-base/spm.model", "type": "xgboost", "size": 4305025 }, { "path": "/opt/sas/model-gli-text/models/pii-base/tokenizer.json", "type": "jinja2_template", "size": 16351316 }, { "path": "/opt/sas/model-gli-text/models/pii-base/tokenizer_config.json", "type": "jinja2_template", "size": 20227 } ], "has_errors": false, "scanner_names": [ "metadata", "manifest", "onnx", "xgboost", "jinja2_template" ], "file_metadata": { "/opt/sas/model-gli-text/models/pii-base/LICENSE": { "license_info": [ { "spdx_id": "Apache-2.0", "name": "Apache License 2.0", "confidence": 0.8, "source": "file_header", "commercial_allowed": true } ], "copyright_notices": [], "license_files_nearby": [ "/opt/sas/model-gli-text/models/pii-base/LICENSE" ], "is_dataset": false, "is_model": false, "risk_score": 0.0, "scan_timestamp": 1777252460.71331, "content_hash": "cfc7749b96f63bd31c3c42b5c471bf756814053e847c10f3eb003417bc523d30" }, "/opt/sas/model-gli-text/models/pii-base/README.md": { "file_size": 1524, "license_info": [ { "spdx_id": "Apache-2.0", "name": "Apache License 2.0", "confidence": 0.8, "source": "file_header", "commercial_allowed": true } ], "copyright_notices": [], "license_files_nearby": [ "/opt/sas/model-gli-text/models/pii-base/LICENSE" ], "is_dataset": false, "is_model": false, "risk_score": 0.0, "scan_timestamp": 1777252460.7228546, "content_hash": "960b01bd1b5906601dba60ee14a6462dd0315359f3a1e85f2665ec9f2138e46e" }, "/opt/sas/model-gli-text/models/pii-base/added_tokens.json": { "license_info": [], "copyright_notices": [], "license_files_nearby": [ "/opt/sas/model-gli-text/models/pii-base/LICENSE" ], "is_dataset": true, "is_model": false, "risk_score": 0.0, "scan_timestamp": 1777252460.7806668, "content_hash": "030e747c4ca7992a3ac794c6fda9919352c88ae722e85178217cd083b450078d" }, "/opt/sas/model-gli-text/models/pii-base/gliner_config.json": { "file_size": 3352, "license_info": [], "copyright_notices": [], "license_files_nearby": [ "/opt/sas/model-gli-text/models/pii-base/LICENSE" ], "is_dataset": true, "is_model": false, "risk_score": 0.0, "scan_timestamp": 1777252460.789817, "root_type": "dict", "keys": [ "class_token_index", "dropout", "embed_ent_token", "encoder_config", "ent_token", "eval_every", "fine_tune", "fuse_layers", "has_rnn", "hidden_size", "labels_encoder", "labels_encoder_config", "lr_encoder", "lr_others", "max_len", "max_neg_type_ratio", "max_types", "max_width", "model_name", "model_type", "name", "num_post_fusion_layers", "num_steps", "post_fusion_schema", "random_drop", "sep_token", "shuffle_types", "size_sup", "span_mode", "subtoken_pooling", "train_batch_size", "transformers_version", "vocab_size", "warmup_ratio", "words_splitter_type" ], "content_hash": "3e05752248db7674c2fc47d40bf80ce19755fa4b6ebcd3a5efd23f687666fc98" }, "/opt/sas/model-gli-text/models/pii-base/model.onnx": { "file_size": 1157115210, "file_hashes": { "md5": "c2bd82d04391e7d258e24cdd318fe3be", "sha256": "0772f22e05659aa5c10117350d7143f51272002f8f7d65c5fd430439be180b49", "sha512": "4c5f287b1e1a5c02c523f5f943b2bf115ec592972f7a3d9e8b51409ad3f81e70bdb5bd5337200e41201cd66b6e9e311b33158a41e01f1cc6e8a80872441458fd" }, "license_info": [], "copyright_notices": [], "license_files_nearby": [ "/opt/sas/model-gli-text/models/pii-base/LICENSE" ], "is_dataset": false, "is_model": true, "risk_score": 0.0, "scan_timestamp": 1777253112.7048194, "ir_version": 7, "producer_name": "pytorch", "node_count": 5173, "scan_outcome": "inconclusive", "scan_outcome_reasons": [ "onnx_weight_distribution_analysis_incomplete" ], "layers_analyzed": 85, "anomalies_found": 1, "content_hash": "0772f22e05659aa5c10117350d7143f51272002f8f7d65c5fd430439be180b49" }, "/opt/sas/model-gli-text/models/pii-base/special_tokens_map.json": { "license_info": [], "copyright_notices": [], "license_files_nearby": [ "/opt/sas/model-gli-text/models/pii-base/LICENSE" ], "is_dataset": true, "is_model": false, "risk_score": 0.0, "scan_timestamp": 1777253112.7111213, "content_hash": "9463f61e1b109a8eb4688b829260d7c6b1e6dff04c98ff7269bb89e2b92369b9" }, "/opt/sas/model-gli-text/models/pii-base/spm.model": { "file_size": 4305025, "file_hashes": { "md5": "b4ca07289eac48600b29529119d565e2", "sha256": "13c8d666d62a7bc4ac8f040aab68e942c861f93303156cc28f5c7e885d86d6e3", "sha512": "33338f21f4b98563d99e4849dd1dc08869453389e5269d7da7bae06f65014cda04ff66ab2ccabe84260f75b8752f922cdbc4f9a6448f0cf78521ff6f902d7bf1" }, "license_info": [], "copyright_notices": [], "license_files_nearby": [ "/opt/sas/model-gli-text/models/pii-base/LICENSE" ], "is_dataset": false, "is_model": false, "risk_score": 0.0, "scan_timestamp": 1777253112.7860794, "scan_outcome": "inconclusive", "scan_outcome_reasons": [ "xgboost_binary_structure_unrecognized" ], "analysis_incomplete": true, "content_hash": "13c8d666d62a7bc4ac8f040aab68e942c861f93303156cc28f5c7e885d86d6e3" }, "/opt/sas/model-gli-text/models/pii-base/tokenizer.json": { "file_size": 16351316, "ml_context": { "frameworks": {}, "overall_confidence": 0.0, "is_ml_content": false, "detected_patterns": [], "optimization_hints": [], "file_type": "tokenizer_config", "is_tokenizer": true, "confidence": 2 }, "license_info": [], "copyright_notices": [], "license_files_nearby": [ "/opt/sas/model-gli-text/models/pii-base/LICENSE" ], "is_dataset": true, "is_model": false, "risk_score": 0.0, "scan_timestamp": 1777253117.7068598, "content_hash": "deb8c80067fb15f9e37f96b8e3a8f8d125f6d6d98a2d3445dac99dc6085adca9" }, "/opt/sas/model-gli-text/models/pii-base/tokenizer_config.json": { "file_size": 20227, "ml_context": { "frameworks": {}, "overall_confidence": 0.0, "is_ml_content": false, "detected_patterns": [], "optimization_hints": [], "file_type": "tokenizer_config", "is_tokenizer": true, "confidence": 2 }, "license_info": [], "copyright_notices": [], "license_files_nearby": [ "/opt/sas/model-gli-text/models/pii-base/LICENSE" ], "is_dataset": true, "is_model": false, "risk_score": 0.0, "scan_timestamp": 1777253117.7184079, "content_hash": "ec50aa121a963ca8fbed5f0dd95cc5275b3ade17eaf4a1d28478aa548c767243" } }, "content_hash": "3a8569910657fbdd21f9b0dbf12f0191b8c1dee8f00b6fa9dcda44c6ebc4d984", "start_time": 1777252459.052951, "duration": 658.6746821403503, "total_checks": 29, "passed_checks": 29, "failed_checks": 0, "success": false } }