ai model report

Is Quazim0t0/Qwenx86-4B-compact safe to load?

CyberXYZ rates Quazim0t0/Qwenx86-4B-compact LOW. No version-matched advisories and no malicious packages. It depends on 96 tracked packages, and 4 carry advisories. It does not require trust_remote_code. A mixed serialization signal is recorded for it; the model_load_safety tool gives the per-file verdict.

View on HuggingFace

// posture
advisories 100provenance 70resolution 100xyz safety 100load safety 60supply chain 100scanner trust 55code execution 70
fig. 01 — posture on eight axes, 100 is clean. Weakest: scanner trust at 55.
// the finding
not scoredno advisory applies to a version this model pinsLOW

LOWThe repo's commit SHA changed since we first saw it — weights were replaced.

3 more findings on this model.

Author
Quazim0t0
License
apache-2.0
Downloads
222
Remote code
not required
// dependencies

17 direct, 13 with findings, 89 reachable

PackageEvidenceAdvisoriesWorst
pillowdirect, install147none pinned
transformersdirect, install24none pinned
Create a free accountto see all 96 dependencies, which versions are pinned, and what to change.
// questions
Is Quazim0t0/Qwenx86-4B-compact safe to load?

CyberXYZ does not call a model safe in absolute terms. It rates Quazim0t0/Qwenx86-4B-compact LOW. No version-matched advisories and no malicious packages. That covers its dependencies and how it loads, not every file it ships, so treat any check that did not run as unverified and check the exact files before you load them.

What does Quazim0t0/Qwenx86-4B-compact depend on?

CyberXYZ tracks 96 dependencies for Quazim0t0/Qwenx86-4B-compact, 17 of them direct. 4 carry advisories. They include pillow and transformers. A free account lists all of them.

Does Quazim0t0/Qwenx86-4B-compact run code when it loads?

HuggingFace does not mark Quazim0t0/Qwenx86-4B-compact as requiring trust_remote_code. That says nothing about the format of its weight files, which model_load_safety checks per file.

How do I check Quazim0t0/Qwenx86-4B-compact before loading it?

Run the xyz MCP tool model_load_safety on Quazim0t0/Qwenx86-4B-compact to get a verdict on its weight files before you load them, or search it in CyberXYZ Check at https://cyberxyz.io/check?q=Quazim0t0%2FQwenx86-4B-compact.


Risk computed 2026-11-14 at 13:54 UTC. Dependencies come from the model's requirements, its declared loader and the code it ships; advisories from NVD, GHSA and OSV.

Model risk is computed from the model's declared and observed Python dependencies and the code it ships. If a finding is wrong, tell us.