| tags: | |
| - security-research | |
| - not-for-production | |
| # diffusers/03-artifact-component-path-local-read-republish-afr | |
| Inert scanner specimen for academic security research. It preserves the finding's | |
| model-metadata carrier: **modular_model_index.json component path** (AFR). It must not be used in production. | |
| Any active probe directly executes only `whoami` (argv form, never `shell=True`) and writes | |
| its output to `HFSCAN_DIFFUSERS__03_ARTIFACT_COMPONENT_PATH_LOCAL_READ_REPUBLISH_AFR` under `/tmp` or `$TMPDIR`; it performs no credential access or | |
| network operation. See the collection-level | |
| `MANIFEST.json` for hashes and the source finding path. | |
| AFW specimens use the literal inert payload `PWNED-INERT`. When the vulnerable primitive | |
| forces a container or suffix (for example NumPy `.npy`, a checkpoint, or `.jinja`), the | |
| manifest records that format constraint instead of claiming raw-byte control. | |