---
tags:
  - security-research
  - not-for-production
---

# diffusers/03-artifact-component-path-local-read-republish-afr

Inert scanner specimen for academic security research. It preserves the finding's
model-metadata carrier: **modular_model_index.json component path** (AFR). It must not be used in production.

Any active probe directly executes only `whoami` (argv form, never `shell=True`) and writes
its output to `HFSCAN_DIFFUSERS__03_ARTIFACT_COMPONENT_PATH_LOCAL_READ_REPUBLISH_AFR` under `/tmp` or `$TMPDIR`; it performs no credential access or
network operation. See the collection-level
`MANIFEST.json` for hashes and the source finding path.

AFW specimens use the literal inert payload `PWNED-INERT`. When the vulnerable primitive
forces a container or suffix (for example NumPy `.npy`, a checkpoint, or `.jinja`), the
manifest records that format constraint instead of claiming raw-byte control.