ai model report

Is allenai/olmOCR-2-7B-1025-FP8 safe to load?

CyberXYZ rates allenai/olmOCR-2-7B-1025-FP8 CLEAN. No version-matched advisories and no malicious packages. It depends on 116 tracked packages, and 5 carry advisories. It does not require trust_remote_code.

View on HuggingFace

// posture
advisories 100provenance 75resolution 100xyz safety 100load safety 100supply chain 100scanner trust 100code execution 70
fig. 01 — posture on eight axes, 100 is clean. Weakest: code execution at 70.
// the finding
not scoredno advisory applies to a version this model pinsCLEAN

INFOconfig.json was authored against transformers 4.53.2, which has known advisories. Consumers normally install a current version — this only bites if you pin for reproducibility.

1 more finding on this model.

Author
allenai
Task
image-text-to-text
Loader
transformers
License
apache-2.0
Downloads
169,227
Remote code
not required
// dependencies

13 direct, 8 with findings, 108 reachable

PackageEvidenceAdvisoriesWorst
transformersdirect, runtime24none pinned
torchdirect, runtime13none pinned
Create a free accountto see all 116 dependencies, which versions are pinned, and what to change.
// questions
Is allenai/olmOCR-2-7B-1025-FP8 safe to load?

CyberXYZ does not call a model safe in absolute terms. It rates allenai/olmOCR-2-7B-1025-FP8 CLEAN. No version-matched advisories and no malicious packages. That covers its dependencies and how it loads, not every file it ships, so treat any check that did not run as unverified and check the exact files before you load them.

What does allenai/olmOCR-2-7B-1025-FP8 depend on?

CyberXYZ tracks 116 dependencies for allenai/olmOCR-2-7B-1025-FP8, 13 of them direct. 5 carry advisories. They include transformers and torch. A free account lists all of them.

Does allenai/olmOCR-2-7B-1025-FP8 run code when it loads?

HuggingFace does not mark allenai/olmOCR-2-7B-1025-FP8 as requiring trust_remote_code. That says nothing about the format of its weight files, which model_load_safety checks per file.

How do I check allenai/olmOCR-2-7B-1025-FP8 before loading it?

Run the xyz MCP tool model_load_safety on allenai/olmOCR-2-7B-1025-FP8 to get a verdict on its weight files before you load them, or search it in CyberXYZ Check at https://cyberxyz.io/check?q=allenai%2FolmOCR-2-7B-1025-FP8.


Risk computed 2026-11-14 at 14:42 UTC. Dependencies come from the model's requirements, its declared loader and the code it ships; advisories from NVD, GHSA and OSV.

Model risk is computed from the model's declared and observed Python dependencies and the code it ships. If a finding is wrong, tell us.