Model Intelligence Sheet
hacnho/gguf-add-eos-token-poc overview
GGUF add eos token PoC This repo is a benign security research PoC for Huntr MFV triage. Files: llama spm add eos.gguf verify remote poc.py Tested trigger entr…
Runs locally from ~0.7 MB disk (4 GB VRAM class GPUs with llama.cpp / guIDE).
Repository Files & Downloads
1 GGUF files detected
Direct downloads for local inference
| File | Type | Quantization | Size | Link |
|---|---|---|---|---|
| llama-spm-add-eos.gguf | GGUF | GGUF | 0.7 MB | Download |
Model Details
Model README
GGUF add_eos_token PoC
This repo is a benign security research PoC for Huntr MFV triage.
Files:
llama-spm-add-eos.ggufverify_remote_poc.py
Tested trigger entrypoint:
llama-tokenize -m <model> --ids -p <prompt>
Behavior:
- seed vocab-only GGUF uses
tokenizer.ggml.add_eos_token = false - malicious artifact flips that metadata to
true - ordinary prompt tokenization then silently appends the EOS token id
Reproduction
python3 verify_remote_poc.py --repo hacnho/gguf-add-eos-token-poc
Expected output delta
Prompt:
hello world
Control token IDs:
[1, 22172, 3186]
Malicious token IDs:
[1, 22172, 3186, 2]
The same EOS-appending behavior also appears on:
hello worldhello
Scanner posture
Local scout observed:
modelscan:No issues foundon the malicious artifact
Run hacnho/gguf-add-eos-token-poc with guIDE
Download guIDE — the AI-native code editor with local LLM inference and 69 built-in tools.
Source: Hugging Face · Compare models