DEMOThis report is public and visible to anyone with the link for 30 days, then deleted. Save privately — create free account
phantom-gap.gguf
Format: GGUF  ·  Size: 423 B  ·  Scanned: 2026-08-14  ·  2 ms
SHA256: 0c8aa49ca37cd49cff299d115565c60cdfb5e7ad…

Security grade

D
Score: 38/100
1 CRITICAL 2 MEDIUM 2 LOW
Artifact Security
D / 38
Repository Trust
N/A
local upload
Deployment Confidence
Low
Artifact Security grades the file. Repository Trust is unavailable for local uploads — no external provenance to verify. Deployment Confidence reflects artifact grade only.
Score breakdown
Base score 100
MEDIUM Tensor offsets not aligned to 32 bytes (1 tensors) -8
CRITICAL Unexplained data between tensors (1 gap(s), largest 168 B) -40
MEDIUM Unusually high bits-per-parameter: 211.5 -8
LOW No license field in GGUF metadata (general.license) -3
LOW No embedded provenance metadata -3
Penalty subtotal 38/100
Final D / 38
GGUF v3 model | architecture: llama | quantization: F32 | 2 tensors | 1 blocking issue / 4 warnings

Runtime compatibility

Runtime Status Quant Architecture Context
llama.cpp
Ollama
LM Studio
vLLM N/A GGUF not supported — requires safetensors format
HuggingFace Transformers N/A GGUF not directly supported — use safetensors or PyTorch checkpoint

Model info

Architecture
Neural network family — determines which runtime can load this model
llama
Quantization
Weight storage format derived from actual tensor dtypes; lower bits = smaller file and faster inference at the cost of accuracy
F32
Parameters ~
Estimated total number of weight values; determines VRAM needed at inference
16
Chat template
Jinja2 prompt template embedded in model; controls how messages are formatted for inference
✗ No
Tensors
Total number of weight tensors stored in the file
2

Security findings (5)

CRITICAL Data Integrity
Unexplained data between tensors (1 gap(s), largest 168 B)
'blk.0.attn_q.weight' declares 32 B of tensor data but its data region runs 200 B before the next tensor (or end of file) starts -- 168 bytes unaccounted for. This space is not part of any declared tensor and is invisible to loaders that only read known tensor regions -- a place to hide an arbitrary payload.
→ Reject this file; a correctly produced GGUF has no slack space between tensor data regions
MEDIUM Tensor Integrity
Tensor offsets not aligned to 32 bytes (1 tensors)
First few: ['blk.0.attn_k.weight']
→ Misaligned tensor offsets violate the GGUF spec and may cause SIGBUS/crashes on strict-alignment hardware (ARM, RISC-V)
MEDIUM Resource Limits
Unusually high bits-per-parameter: 211.5
Values >128 bpp suggest most file content is not tensor data (padding, embedded files, or metadata bloat)
→ Investigate what occupies the non-tensor file space
LOW Supply Chain
No license field in GGUF metadata (general.license)
Absence of license information makes it impossible to determine usage rights
→ Add general.license to model metadata before distributing; use an SPDX identifier
LOW Supply Chain
No embedded provenance metadata
None of general.author, general.source.url, general.base_model.0, or general.source.huggingface.repository are embedded in the GGUF file. Without any origin signal the model cannot be traced to a trusted source or compared against a reference checkpoint for tampering detection. For files uploaded directly, provenance is especially critical because the scanner cannot infer repository origin from the file alone.
→ Add at least one of: general.author, general.source.huggingface.repository, or general.source.url

Integrity & Structure

SHA-2560c8aa49ca37cd49cff299d115565c60cdfb5e7ad21bc46e5a931253335057528
SHA-512d6dc9d1463163a631f7d7027f911bb0ad1b6375293cf03de202ab4414aa1042f2f722b72720d0a23…
File size (bytes)423
Header + KV + tensor directory192 bytes (0.00 MB)
Tensor data region231 bytes (0.00 MB)
Trailing bytes0
Unaccounted bytes0 ✓
KV metadata keys1
Tensors parsed2
Offsets monotone✓ OK
Max tensor offset200

DType Mix

DTypeCountTotal bytesTotal MBAvg bits/elem
F32 2 231 0.0 115.5

Tensor Preview (first 2)

#NameDimsDTypeOffsetBytesbits/elem
0 blk.0.attn_q.weight [8] F32 0 200 200.0
1 blk.0.attn_k.weight [8] F32 200 31 31.0

Scan coverage

Checks performed
  • Magic bytes & GGUF version validation
  • Header parse (tensor count, KV count)
  • KV metadata parse — all key/value pairs
  • Tensor directory parse (names, dims, dtype, offsets)
  • Tensor offset monotonicity
  • Tensor overlap detection
  • Tensor out-of-bounds detection
  • Data section alignment verification
  • Trailing bytes after last tensor
  • Unaccounted bytes (header vs file size)
  • Dtype histogram & quantization mix analysis
  • Embedding tensor size cross-validation
  • Chat template static scan (Jinja2/SSTI patterns)
  • Runtime compatibility heuristics
  • External model card / repository context: not available for local upload
  • Upstream repository: not checked — not available for direct file upload
Not covered
  • Runtime execution or dynamic analysis
  • Behavioral backdoor detection
  • Weight-level semantic backdoor detection
  • Full upstream repository verification
  • License validation beyond embedded metadata
  • Malware scanning of surrounding repo files
  • Adversarial robustness or alignment audit
  • Training data provenance
ⓘ Static scanning can detect structural anomalies and known malicious patterns. It cannot guarantee absence of risk. Treat results as a security signal, not a formal audit.
Raw scan data (.llmscan JSON)
{
  "compatibility": [
    {
      "arch": true,
      "container": true,
      "context": null,
      "notes": "GGUF v3 container: supported | quant F32: supported",
      "quant": true,
      "runtime": "llama.cpp",
      "supported": true
    },
    {
      "arch": true,
      "container": true,
      "context": null,
      "notes": "GGUF via llama.cpp backend: container and quantization supported",
      "quant": true,
      "runtime": "Ollama",
      "supported": true
    },
    {
      "arch": true,
      "container": true,
      "context": null,
      "notes": "GGUF container and quantization supported; GPU/CPU inference",
      "quant": true,
      "runtime": "LM Studio",
      "supported": true
    },
    {
      "arch": null,
      "container": false,
      "context": null,
      "not_supported_msg": "GGUF not supported \u2014 requires safetensors format",
      "notes": "GGUF not supported; requires safetensors format",
      "quant": false,
      "runtime": "vLLM",
      "supported": false
    },
    {
      "arch": null,
      "container": false,
      "context": null,
      "not_supported_msg": "GGUF not directly supported \u2014 use safetensors or PyTorch checkpoint",
      "notes": "GGUF not supported; requires safetensors or PyTorch checkpoint",
      "quant": false,
      "runtime": "HuggingFace Transformers",
      "supported": false
    }
  ],
  "format": "LLM-SCAN",
  "format_version": "1.0",
  "generator": {
    "name": "llmscan-engine",
    "version": "2.0.0"
  },
  "model": {
    "alignment": 32,
    "arch": "llama",
    "architecture": "llama",
    "basename": null,
    "block_count": null,
    "bos_token_id": null,
    "chat_template": null,
    "context_length": null,
    "dtype_histogram": {
      "F32": 2
    },
    "dtype_percentage": {
      "F32": 100.0
    },
    "dtype_stats": {
      "F32": {
        "avg_bits_per_elem": 115.5,
        "bytes": 231,
        "count": 2,
        "mb": 0.0
      }
    },
    "embedding_length": null,
    "eos_token_id": null,
    "feed_forward_length": null,
    "file_size_bytes": 423,
    "file_size_mb": 0.0,
    "finetune": null,
    "format": "gguf",
    "gguf_version": 3,
    "has_chat_template": false,
    "head_count": null,
    "head_count_kv": null,
    "header_kv_dir_bytes": 192,
    "kv_count": 1,
    "kv_meta": {
      "keys": [
        "general.architecture"
      ],
      "kv_count": 1,
      "values_redacted": true
    },
    "license": null,
    "max_tensor_offset": 200,
    "misaligned_tensors": 1,
    "model_name": null,
    "offsets_monotone": true,
    "oob_tensor_count": 0,
    "overlapping_tensor_pairs": 0,
    "param_estimate": 16,
    "params_estimate": 16,
    "quantization": "F32",
    "scanner_model_info": {
      "alignment": 32,
      "architecture": "llama",
      "basename": null,
      "block_count": null,
      "bos_token_id": null,
      "chat_template": null,
      "context_length": null,
      "data_section_start": 192,
      "dtype_histogram": {
        "F32": 2
      },
      "dtype_percentage": {
        "F32": 100.0
      },
      "dtype_stats": {
        "F32": {
          "avg_bits_per_elem": 115.5,
          "bytes": 231,
          "count": 2,
          "mb": 0.0
        }
      },
      "embedding_length": null,
      "eos_token_id": null,
      "feed_forward_length": null,
      "file_size_bytes": 423,
      "file_size_mb": 0.0,
      "finetune": null,
      "has_chat_template": false,
      "head_count": null,
      "head_count_kv": null,
      "header_end_offset": 171,
      "header_kv_dir_bytes": 192,
      "kv_count": 1,
      "kv_keys": [
        "general.architecture"
      ],
      "license": null,
      "magic": "GGUF",
      "max_tensor_offset": 200,
      "misaligned_tensors": 1,
      "model_name": null,
      "offsets_monotone": true,
      "oob_tensor_count": 0,
      "overlapping_tensor_pairs": 0,
      "param_estimate": 16,
      "quantization": "F32",
      "sha256": "0c8aa49ca37cd49cff299d115565c60cdfb5e7ad21bc46e5a931253335057528",
      "sha512": "d6dc9d1463163a631f7d7027f911bb0ad1b6375293cf03de202ab4414aa1042f2f722b72720d0a232311eb32e8533ba3ded15d8f70d26583813b9cea522e8918",
      "size_label": null,
      "tensor_bytes_sum": 231,
      "tensor_count": 2,
      "tensor_delta_bytes": 192,
      "tensor_delta_mb": 0.0,
      "tensor_preview": [
        {
          "bits_per_elem": 200.0,
          "byte_len": 200,
          "dims": [
            8
          ],
          "dtype_id": 0,
          "dtype_name": "F32",
          "index": 0,
          "name": "blk.0.attn_q.weight",
          "offset": 0
        },
        {
          "bits_per_elem": 31.0,
          "byte_len": 31,
          "dims": [
            8
          ],
          "dtype_id": 0,
          "dtype_name": "F32",
          "index": 1,
          "name": "blk.0.attn_k.weight",
          "offset": 200
        }
      ],
      "tokenizer_model": null,
      "top_tensors_by_size": [
        {
          "byte_len": 200,
          "dims": [
            8
          ],
          "dtype": "F32",
          "n_elem": 8,
          "name": "blk.0.attn_q.weight"
        },
        {
          "byte_len": 31,
          "dims": [
            8
          ],
          "dtype": "F32",
          "n_elem": 8,
          "name": "blk.0.attn_k.weight"
        }
      ],
      "trailing_bytes": 0,
      "unaccounted_bytes": 0,
      "version": 3,
      "vocab_size": null
    },
    "sha256": "0c8aa49ca37cd49cff299d115565c60cdfb5e7ad21bc46e5a931253335057528",
    "sha512": "d6dc9d1463163a631f7d7027f911bb0ad1b6375293cf03de202ab4414aa1042f2f722b72720d0a232311eb32e8533ba3ded15d8f70d26583813b9cea522e8918",
    "size_label": null,
    "tensor_bytes_sum": 231,
    "tensor_count": 2,
    "tensor_delta_bytes": 192,
    "tensor_delta_mb": 0.0,
    "tensor_preview": [
      {
        "bits_per_elem": 200.0,
        "byte_len": 200,
        "dims": [
          8
        ],
        "dtype_id": 0,
        "dtype_name": "F32",
        "index": 0,
        "name": "blk.0.attn_q.weight",
        "offset": 0
      },
      {
        "bits_per_elem": 31.0,
        "byte_len": 31,
        "dims": [
          8
        ],
        "dtype_id": 0,
        "dtype_name": "F32",
        "index": 1,
        "name": "blk.0.attn_k.weight",
        "offset": 200
      }
    ],
    "tokenizer_model": null,
    "top_tensors_by_size": [
      {
        "byte_len": 200,
        "dims": [
          8
        ],
        "dtype": "F32",
        "n_elem": 8,
        "name": "blk.0.attn_q.weight"
      },
      {
        "byte_len": 31,
        "dims": [
          8
        ],
        "dtype": "F32",
        "n_elem": 8,
        "name": "blk.0.attn_k.weight"
      }
    ],
    "trailing_bytes": 0,
    "unaccounted_bytes": 0,
    "values_redacted": true,
    "vocab_size": null
  },
  "report": {
    "bullets": [
      "GGUF v3 model | architecture: llama | quantization: F32 | 2 tensors | 1 blocking issue / 4 warnings",
      "SHA256: 0c8aa49ca37cd49c..."
    ],
    "recommendations": [
      "Reject this file; a correctly produced GGUF has no slack space between tensor data regions",
      "Misaligned tensor offsets violate the GGUF spec and may cause SIGBUS/crashes on strict-alignment hardware (ARM, RISC-V)",
      "Investigate what occupies the non-tensor file space",
      "Add general.license to model metadata before distributing; use an SPDX identifier",
      "Add at least one of: general.author, general.source.huggingface.repository, or general.source.url"
    ],
    "summary": "GGUF v3 model | architecture: llama | quantization: F32 | 2 tensors | 1 blocking issue / 4 warnings"
  },
  "scan_context": {
    "duration_ms": 2,
    "ended_at": "2026-08-14T23:56:25+00:00Z",
    "limits": {
      "sandbox": true,
      "timeout_ms": 60000
    },
    "mode": "static-deep",
    "started_at": "2026-08-14T23:56:25+00:00Z"
  },
  "security": {
    "findings": [
      {
        "category": "Tensor Integrity",
        "detail": "First few: [\u0027blk.0.attn_k.weight\u0027]",
        "recommendation": "Misaligned tensor offsets violate the GGUF spec and may cause SIGBUS/crashes on strict-alignment hardware (ARM, RISC-V)",
        "severity": "MEDIUM",
        "title": "Tensor offsets not aligned to 32 bytes (1 tensors)"
      },
      {
        "category": "Data Integrity",
        "detail": "\u0027blk.0.attn_q.weight\u0027 declares 32 B of tensor data but its data region runs 200 B before the next tensor (or end of file) starts -- 168 bytes unaccounted for. This space is not part of any declared tensor and is invisible to loaders that only read known tensor regions -- a place to hide an arbitrary payload.",
        "recommendation": "Reject this file; a correctly produced GGUF has no slack space between tensor data regions",
        "severity": "CRITICAL",
        "title": "Unexplained data between tensors (1 gap(s), largest 168 B)"
      },
      {
        "category": "Resource Limits",
        "detail": "Values \u003e128 bpp suggest most file content is not tensor data (padding, embedded files, or metadata bloat)",
        "recommendation": "Investigate what occupies the non-tensor file space",
        "severity": "MEDIUM",
        "title": "Unusually high bits-per-parameter: 211.5"
      },
      {
        "category": "Supply Chain",
        "detail": "Absence of license information makes it impossible to determine usage rights",
        "recommendation": "Add general.license to model metadata before distributing; use an SPDX identifier",
        "severity": "LOW",
        "title": "No license field in GGUF metadata (general.license)"
      },
      {
        "category": "Supply Chain",
        "detail": "None of general.author, general.source.url, general.base_model.0, or general.source.huggingface.repository are embedded in the GGUF file. Without any origin signal the model cannot be traced to a trusted source or compared against a reference checkpoint for tampering detection. For files uploaded directly, provenance is especially critical because the scanner cannot infer repository origin from the file alone.",
        "recommendation": "Add at least one of: general.author, general.source.huggingface.repository, or general.source.url",
        "severity": "LOW",
        "title": "No embedded provenance metadata"
      }
    ],
    "grade": "D",
    "score": 38
  },
  "source": {
    "filename": "phantom-gap.gguf",
    "hashes": {
      "sha256": "0c8aa49ca37cd49cff299d115565c60cdfb5e7ad21bc46e5a931253335057528"
    },
    "input_type": "file",
    "size_bytes": 423
  },
  "tensors": {
    "count": 2,
    "dtype_histogram": {
      "F32": 2
    },
    "dtype_stats": {
      "F32": {
        "avg_bits_per_elem": 115.5,
        "bytes": 231,
        "count": 2,
        "mb": 0.0
      }
    },
    "integrity": {
      "header_kv_dir_bytes": 192,
      "misaligned_tensors": 1,
      "offsets_monotone": true,
      "oob_tensor_count": 0,
      "overlapping_tensor_pairs": 0,
      "tensor_bytes_sum": 231,
      "tensor_delta_bytes": 192,
      "tensor_delta_mb": 0.0,
      "trailing_bytes": 0,
      "unaccounted_bytes": 0
    },
    "preview": [
      {
        "bits_per_elem": 200.0,
        "byte_len": 200,
        "dims": [
          8
        ],
        "dtype_id": 0,
        "dtype_name": "F32",
        "index": 0,
        "name": "blk.0.attn_q.weight",
        "offset": 0
      },
      {
        "bits_per_elem": 31.0,
        "byte_len": 31,
        "dims": [
          8
        ],
        "dtype_id": 0,
        "dtype_name": "F32",
        "index": 1,
        "name": "blk.0.attn_k.weight",
        "offset": 200
      }
    ]
  },
  "tokenizer": {
    "bos_token_id": null,
    "chat_template_chars": null,
    "eos_token_id": null,
    "has_chat_template": false,
    "type": null,
    "vocab_size": null
  }
}