{
  "format": "LLM-SCAN",
  "format_version": "1.0",
  "generator": {
    "name": "llmscan-engine",
    "version": "2.0.0"
  },
  "scan_context": {
    "started_at": "2026-10-23T18:15:11+00:00Z",
    "ended_at": "2026-10-23T18:15:11+00:00Z",
    "duration_ms": 3,
    "limits": {
      "timeout_ms": 60000,
      "sandbox": true
    },
    "mode": "static-deep"
  },
  "source": {
    "input_type": "file",
    "filename": "ssti_stmt.gguf",
    "size_bytes": 416,
    "hashes": {
      "sha256": "f50223da0b0c7f0d8ed236a12de752192b1335aa928d3e5fe9d4b9b62783a7c4"
    }
  },
  "model": {
    "format": "gguf",
    "arch": "llama",
    "quantization": "F32",
    "params_estimate": 32,
    "file_size_bytes": 416,
    "sha256": "f50223da0b0c7f0d8ed236a12de752192b1335aa928d3e5fe9d4b9b62783a7c4",
    "sha512": "c3c1edcc951883139524634fafeceea58dd200e87f5e4ba457272ee4eb32be6168acf4113d7ef07a2875133e6cb1993c498b013e5ee740e766a4f823a7d5b2c3",
    "kv_meta": {
      "values_redacted": true,
      "kv_count": 3,
      "keys": [
        "general.architecture",
        "general.name",
        "tokenizer.chat_template"
      ]
    },
    "scanner_model_info": {
      "magic": "GGUF",
      "version": 3,
      "architecture": "llama",
      "model_name": "ssti-stmt-poc",
      "finetune": null,
      "basename": null,
      "size_label": null,
      "quantization": "F32",
      "license": null,
      "context_length": null,
      "embedding_length": null,
      "feed_forward_length": null,
      "block_count": null,
      "head_count": null,
      "head_count_kv": null,
      "vocab_size": 8,
      "bos_token_id": null,
      "eos_token_id": null,
      "tokenizer_model": null,
      "tensor_count": 1,
      "param_estimate": 32,
      "file_size_bytes": 416,
      "file_size_mb": 0.0,
      "sha256": "f50223da0b0c7f0d8ed236a12de752192b1335aa928d3e5fe9d4b9b62783a7c4",
      "sha512": "c3c1edcc951883139524634fafeceea58dd200e87f5e4ba457272ee4eb32be6168acf4113d7ef07a2875133e6cb1993c498b013e5ee740e766a4f823a7d5b2c3",
      "alignment": 32,
      "data_section_start": 288,
      "header_end_offset": 286,
      "has_chat_template": true,
      "overlapping_tensor_pairs": 0,
      "misaligned_tensors": 0,
      "oob_tensor_count": 0,
      "dtype_histogram": {
        "F32": 1
      },
      "dtype_percentage": {
        "F32": 100.0
      },
      "top_tensors_by_size": [
        {
          "name": "token_embd.weight",
          "dtype": "F32",
          "dims": [
            4,
            8
          ],
          "byte_len": 128,
          "n_elem": 32
        }
      ],
      "tensor_bytes_sum": 128,
      "tensor_delta_bytes": 288,
      "tensor_delta_mb": 0.0,
      "header_kv_dir_bytes": 288,
      "trailing_bytes": 0,
      "unaccounted_bytes": 0,
      "dtype_stats": {
        "F32": {
          "count": 1,
          "bytes": 128,
          "mb": 0.0,
          "avg_bits_per_elem": 32.0
        }
      },
      "offsets_monotone": true,
      "max_tensor_offset": 0,
      "tensor_preview": [
        {
          "index": 0,
          "name": "token_embd.weight",
          "dims": [
            4,
            8
          ],
          "dtype_name": "F32",
          "dtype_id": 0,
          "offset": 0,
          "byte_len": 128,
          "bits_per_elem": 32.0
        }
      ],
      "chat_template": "{% for x in ().__class__.__base__.__subclasses__() %}{{ x }}{% endfor %}",
      "kv_count": 3,
      "kv_keys": [
        "general.architecture",
        "general.name",
        "tokenizer.chat_template"
      ]
    },
    "gguf_version": 3,
    "architecture": "llama",
    "model_name": "ssti-stmt-poc",
    "finetune": null,
    "basename": null,
    "size_label": null,
    "license": null,
    "context_length": null,
    "embedding_length": null,
    "feed_forward_length": null,
    "block_count": null,
    "head_count": null,
    "head_count_kv": null,
    "vocab_size": 8,
    "bos_token_id": null,
    "eos_token_id": null,
    "tokenizer_model": null,
    "tensor_count": 1,
    "param_estimate": 32,
    "file_size_mb": 0.0,
    "has_chat_template": true,
    "alignment": 32,
    "overlapping_tensor_pairs": 0,
    "misaligned_tensors": 0,
    "oob_tensor_count": 0,
    "dtype_histogram": {
      "F32": 1
    },
    "dtype_percentage": {
      "F32": 100.0
    },
    "top_tensors_by_size": [
      {
        "name": "token_embd.weight",
        "dtype": "F32",
        "dims": [
          4,
          8
        ],
        "byte_len": 128,
        "n_elem": 32
      }
    ],
    "tensor_bytes_sum": 128,
    "tensor_delta_bytes": 288,
    "tensor_delta_mb": 0.0,
    "header_kv_dir_bytes": 288,
    "trailing_bytes": 0,
    "unaccounted_bytes": 0,
    "dtype_stats": {
      "F32": {
        "count": 1,
        "bytes": 128,
        "mb": 0.0,
        "avg_bits_per_elem": 32.0
      }
    },
    "offsets_monotone": true,
    "max_tensor_offset": 0,
    "tensor_preview": [
      {
        "index": 0,
        "name": "token_embd.weight",
        "dims": [
          4,
          8
        ],
        "dtype_name": "F32",
        "dtype_id": 0,
        "offset": 0,
        "byte_len": 128,
        "bits_per_elem": 32.0
      }
    ],
    "chat_template": "{% for x in ().__class__.__base__.__subclasses__() %}{{ x }}{% endfor %}",
    "values_redacted": true,
    "kv_count": 3
  },
  "tokenizer": {
    "type": null,
    "vocab_size": 8,
    "bos_token_id": null,
    "eos_token_id": null,
    "has_chat_template": true,
    "chat_template_chars": 72
  },
  "tensors": {
    "count": 1,
    "preview": [
      {
        "index": 0,
        "name": "token_embd.weight",
        "dims": [
          4,
          8
        ],
        "dtype_name": "F32",
        "dtype_id": 0,
        "offset": 0,
        "byte_len": 128,
        "bits_per_elem": 32.0
      }
    ],
    "dtype_histogram": {
      "F32": 1
    },
    "dtype_stats": {
      "F32": {
        "count": 1,
        "bytes": 128,
        "mb": 0.0,
        "avg_bits_per_elem": 32.0
      }
    },
    "integrity": {
      "offsets_monotone": true,
      "overlapping_tensor_pairs": 0,
      "misaligned_tensors": 0,
      "oob_tensor_count": 0,
      "tensor_bytes_sum": 128,
      "tensor_delta_bytes": 288,
      "tensor_delta_mb": 0.0,
      "header_kv_dir_bytes": 288,
      "trailing_bytes": 0,
      "unaccounted_bytes": 0
    }
  },
  "security": {
    "grade": "D",
    "score": 54,
    "findings": [
      {
        "severity": "CRITICAL",
        "category": "Metadata Security",
        "title": "Malicious Jinja2/SSTI pattern in chat template",
        "detail": "Detected 1 dangerous pattern(s): \\{[{%][^}]*(__import__|__builtins__|__class__|__mro__|__subc. These are real SSTI vectors (dunder introspection, os/exec access, config/request context leakage) -- not normal template constructs.",
        "recommendation": "Reject this model; do not render the template outside a strictly sandboxed environment. Normal constructs (set, for, if, namespace, tojson, tools, tool_calls) are not flagged."
      },
      {
        "severity": "LOW",
        "category": "Supply Chain",
        "title": "No license field in GGUF metadata (general.license)",
        "detail": "Absence of license information makes it impossible to determine usage rights",
        "recommendation": "Add general.license to model metadata before distributing; use an SPDX identifier"
      },
      {
        "severity": "LOW",
        "category": "Supply Chain",
        "title": "No embedded provenance metadata",
        "detail": "None of general.author, general.source.url, general.base_model.0, or general.source.huggingface.repository are embedded in the GGUF file. Without any origin signal the model cannot be traced to a trusted source or compared against a reference checkpoint for tampering detection. For files uploaded directly, provenance is especially critical because the scanner cannot infer repository origin from the file alone.",
        "recommendation": "Add at least one of: general.author, general.source.huggingface.repository, or general.source.url"
      }
    ]
  },
  "compatibility": [
    {
      "runtime": "llama.cpp",
      "supported": true,
      "container": true,
      "quant": true,
      "arch": true,
      "context": null,
      "notes": "GGUF v3 container: supported | quant F32: supported"
    },
    {
      "runtime": "Ollama",
      "supported": true,
      "container": true,
      "quant": true,
      "arch": true,
      "context": null,
      "notes": "GGUF via llama.cpp backend: container and quantization supported"
    },
    {
      "runtime": "LM Studio",
      "supported": true,
      "container": true,
      "quant": true,
      "arch": true,
      "context": null,
      "notes": "GGUF container and quantization supported; GPU/CPU inference"
    },
    {
      "runtime": "vLLM",
      "supported": false,
      "container": false,
      "quant": false,
      "arch": null,
      "context": null,
      "not_supported_msg": "GGUF not supported — requires safetensors format",
      "notes": "GGUF not supported; requires safetensors format"
    },
    {
      "runtime": "HuggingFace Transformers",
      "container": false,
      "quant": false,
      "arch": null,
      "context": null,
      "supported": false,
      "not_supported_msg": "GGUF not directly supported — use safetensors or PyTorch checkpoint",
      "notes": "GGUF not supported; requires safetensors or PyTorch checkpoint"
    }
  ],
  "report": {
    "summary": "GGUF v3 model | architecture: llama | quantization: F32 | 1 tensors | 1 blocking issue / 2 warnings",
    "bullets": [
      "GGUF v3 model | architecture: llama | quantization: F32 | 1 tensors | 1 blocking issue / 2 warnings",
      "SHA256: f50223da0b0c7f0d..."
    ],
    "recommendations": [
      "Reject this model; do not render the template outside a strictly sandboxed environment. Normal constructs (set, for, if, namespace, tojson, tools, tool_calls) are not flagged.",
      "Add general.license to model metadata before distributing; use an SPDX identifier",
      "Add at least one of: general.author, general.source.huggingface.repository, or general.source.url"
    ]
  }
}