Is black-forest-labs/flux-3-action-base safe to load?
CyberXYZ rates black-forest-labs/flux-3-action-base LOW. No version-matched advisories and no malicious packages. CyberXYZ tracks no dependencies for it, which is not evidence that it has none, so treat that as unverified. It does not require trust_remote_code.
LOWThe repo's commit SHA changed since we first saw it — weights were replaced.
- Author
- black-forest-labs
- Task
- robotics
- Loader
- lerobot
- License
- other
- Downloads
- 1,952
- Remote code
- not required
0 direct
| Package | Evidence | Advisories | Worst |
|---|
Is black-forest-labs/flux-3-action-base safe to load?
CyberXYZ does not call a model safe in absolute terms. It rates black-forest-labs/flux-3-action-base LOW. No version-matched advisories and no malicious packages. That covers its dependencies and how it loads, not every file it ships, so treat any check that did not run as unverified and check the exact files before you load them.
Does black-forest-labs/flux-3-action-base run code when it loads?
HuggingFace does not mark black-forest-labs/flux-3-action-base as requiring trust_remote_code. That says nothing about the format of its weight files, which model_load_safety checks per file.
How do I check black-forest-labs/flux-3-action-base before loading it?
Run the xyz MCP tool model_load_safety on black-forest-labs/flux-3-action-base to get a verdict on its weight files before you load them, or search it in CyberXYZ Check at https://cyberxyz.io/check?q=black-forest-labs%2Fflux-3-action-base.
Risk computed 2026-11-14 at 13:43 UTC. Dependencies come from the model's requirements, its declared loader and the code it ships; advisories from NVD, GHSA and OSV.