From: protectai <github.com/protectai>Newsgroups: alt.freeweights.toolsSubject:

ModelScan

Release: v0.8.8 (2026-02-18)Commit: 61fcec9License: Apache-2.0

Scans model files for unsafe code such as pickle payloads before you load them.

safety scannerv0.8.8releaseModelScanPythonApache-2.0
FactsLicenseApache-2.0LanguagePythonKindsafety scannerRelease2026-02-18PlatformsLinux, macOS, WindowsLinks to the projectpermissive
$ pip install modelscan
# use with Freeweights
$ modelscan -p ./<file>

Overview

Scans model files for unsafe code such as pickle payloads before you load them.

Kind
safety scanner
License
Apache-2.0
Language
Python
Platforms
Linux, macOS, Windows
Latest release
v0.8.8 (2026-02-18)
Repository
protectai/modelscan

Freeweights links to the project and does not host tool binaries.

Install

$ pip install modelscan
# use with Freeweights
$ modelscan -p ./<file>
$ pip install modelscan

Checked against the project's README on 2026-11-14. The project's own instructions win when they differ: install docs

Freeweights links to the project and does not host tool binaries.

Use with Freeweights

Scan a downloaded model
$ modelscan -p ./<file>

Download the weights from Freeweights first (HF_ENDPOINT or fw.py), then point the tool at the folder.

Catalog models it can run (8665)

135M-lc-100k-rope-12Ba2-rl-e2egit_large-50-32Ba3-rl-DCAgent_exp_rpt_e2egit-large-15-8Ba3-rl-DCAgent_exp_rpt_e2egit-v2-10-8Ba3-rl-DCAgent_exp_rpt_pymethods2test-large-80-8Ba3-rl-DCAgent_exp_rpt_unitsyn-python-large-10-8Ba3-rl-DCAgent_mix_h2_language_proportional-65-8Ba3-rl-DCAgent_mix_h4_binary_easy-50-8Ba3-rl-laion_exp_rpt_ghactions-v3-20-8Ba3-rl-laion_nemotron-gym-agent-calendar-80-8Babacusai_Smaug-Humanizer-GGUFablation-pymethods2test-seqmean-arm0-tis-15-8BAccio-Lab_occamy-1.0-GGUFACE-StepACE-Step-v1-3.5BAesCode-32BAesCode-32B-GGUFAesCode-8BAesCode-8B-GGUFAFM-4.5BAFM-4.5B-BaseAFM-4.5B-ONNXAgentCPM-Explore-GGUFAgentCPM-ReportAgentCPM-Report-GGUFagentica-org_DeepCoder-14B-Preview-GGUFagentica-org_DeepScaleR-1.5B-Preview-GGUFagentica-org_DeepSWE-Preview-GGUFAgents-A1-4Bai_vs_real_image_detectionAI-Anime-Image-Detector-ViTAI-Anime-Image-Detector-ViT-ONNXAI21-Jamba-Reasoning-3BAI21-Jamba2-Miniai21labs_AI21-Jamba-Reasoning-3B-GGUFai21labs_AI21-Jamba2-Mini-GGUFai9stars_G9v3-3B-GGUFalamios_Mistral-Small-3.1-DRAFT-0.5B-GGUFAlchemistCoder-L-7BAlchemistCoder-L-7B-GGUFAlexandria-Gemma-4-12B-it-Ornith9-Summaries-LoRA-r128Alexandria-Gemma-4-12B-it-Ornith9-Summaries-LoRA-r64Alexandria-Gemma-4-12B-it-Qwen27-Knowledge-Units-LoRA-r128Alexandria-Gemma-4-12B-it-Qwen27-Summaries-LoRA-r128Alexandria-Gemma-4-12B-it-Qwen27-Summaries-LoRA-r64Alexandria-Gemma-4-E4B-it-Qwen27-Knowledge-Units-LoRA-r128Alibaba-NLP_Tongyi-DeepResearch-30B-A3B-GGUFall-MiniLM-L6-v1all-MiniLM-L6-v2all-MiniLM-L6-v2-4bitall-mpnet-base-v1ALLaM-7B-Instruct-previewallenai_Olmo-3-7B-Instruct-GGUFallenai_Olmo-3-7B-Think-GGUFallenai_Olmo-3.1-32B-Instruct-GGUFallenai_Olmo-3.1-32B-Think-GGUFallenai_olmOCR-2-7B-1025-GGUFallenai_olmOCR-7B-0225-preview-GGUFallenai-specterAM-Thinking-v1

and 8605 more.

License

License
Apache-2.0
Class
Permissive

Read the license

Freeweights links to the project and does not host tool binaries.

Provenance

From: protectai <github.com/protectai>Newsgroups: alt.freeweights.toolsSubject: ModelScanRelease: v0.8.8 (2026-02-18)Commit: 61fcec9License: Apache-2.0
Repository
protectai/modelscan
Pinned release
v0.8.8, 2026-02-18
Release commit
61fcec9c2a37c24c1fb12d84ede30fe248a364bd
Default branch
main 61fcec9c2a37c24c1fb12d84ede30fe248a364bd
Fetched
2026-11-14
Takedowns
None.

Freeweights links to the project and does not host tool binaries.

Works with

8665 catalog models. See the list