File size: 3,296 Bytes
7f13abc 025dae8 7f13abc d49127e 7f13abc 025dae8 7f13abc 025dae8 | 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 | ---
library_name: transformers
pipeline_tag: text-classification
license: apache-2.0
base_model: AlexWortega/openjev
datasets:
- ProtectSkills/MaliciousSkillBench
tags:
- skillscreen
- agent-security
- nli
- experimental
---
# SkillScreen-2B-Package-Experimental
Experimental 2B decision model for `SKILL.md` **and related file contents**.
Trained on the recovered SRC010 package cohort with a 32K input budget.
Based on [OpenJev 2B](https://huggingface.co/AlexWortega/openjev). Full weights are at the root.
The original LoRA adapter and classification head are in `adapter/`.
## Use
Requires CUDA with BF16 support.
```bash
pip install huggingface_hub
hf download SkillScreen/SkillScreen-2B-Package-Experimental --revision v1.1 --local-dir skillscreen
pip install -r skillscreen/requirements.txt
python skillscreen/score.py path/to/package.json
```
Native maliciousness score **≥ 0.5** is flagged as suspicious.
`package.json` contains Markdown and companion file text.
```json
{"skill_text": "Contents of SKILL.md", "files": [{"path": "scripts/helper.py", "text": "File contents"}]}
```
[Checkpoint details](provenance.json) · [Export verification](merge_verification.json) · [Project page](https://jerroldh.github.io/SkillScreen-webpage/) · [Code](https://github.com/JerroldH/SkillScreen)
Jerrold Huang, Junwei Quan, Saiyue Lyu, Zihan Guo, Yingqiang Ge.
## Citation
If you use SkillScreen's code, models, or predictions, or build models based on SkillScreen in your research, please cite the SkillScreen paper for the underlying method. Package-Experimental is a separate extension; its package-context results are not reported in that paper. If you release a derived model, please identify SkillScreen as its source and link to the original checkpoint.
```bibtex
@article{huang2026skillscreen,
title = {SkillScreen: High-Recall Screening of Malicious Agent Skills with Decision Models},
author = {Huang, Jerrold and Quan, Junwei and Lyu, Saiyue and Guo, Zihan and Ge, Yingqiang},
journal = {arXiv preprint arXiv:2610.17727},
year = {2026},
doi = {10.48550/arXiv.2610.17727},
url = {https://arxiv.org/abs/2610.17727}
}
```
Machine-readable citation metadata is provided in [CITATION.cff](CITATION.cff). These citation requests do not add conditions to the licenses below.
## License
Model weights (including the LoRA adapter and classification head), project-authored code, configuration, and code examples are licensed under [Apache-2.0](LICENSE), for rights held by the SkillScreen contributors. The model card, documentation, citation metadata, and released provenance/evaluation reports are licensed under [CC BY 4.0](LICENSE-CC-BY-4.0).
Research and commercial use, fine-tuning, and redistribution are permitted under these licenses without individual permission requests. Preserve the applicable attribution and license notices, and identify modifications as required by each license.
Upstream OpenJev and Qwen rights and notices remain applicable. See [THIRD_PARTY_NOTICES.md](THIRD_PARTY_NOTICES.md), [LICENSE-OPENJEV](LICENSE-OPENJEV), and [LICENSE-QWEN](LICENSE-QWEN).
The `v1.1` revision updates licensing and citation information. Its model weights, adapters, tokenizer, scoring code, and configurations are unchanged from `v1`.
|