SkillScreen-2B-Package-Experimental

Experimental 2B decision model for SKILL.md and related file contents. Trained on the recovered SRC010 package cohort with a 32K input budget.

Based on OpenJev 2B. Full weights are at the root. The original LoRA adapter and classification head are in adapter/.

Use

Requires CUDA with BF16 support.

pip install huggingface_hub
hf download SkillScreen/SkillScreen-2B-Package-Experimental --revision v1.1 --local-dir skillscreen
pip install -r skillscreen/requirements.txt
python skillscreen/score.py path/to/package.json

Native maliciousness score ≥ 0.5 is flagged as suspicious.

package.json contains Markdown and companion file text.

{"skill_text": "Contents of SKILL.md", "files": [{"path": "scripts/helper.py", "text": "File contents"}]}

Checkpoint details · Export verification · Project page · Code

Jerrold Huang, Junwei Quan, Saiyue Lyu, Zihan Guo, Yingqiang Ge.

Citation

If you use SkillScreen's code, models, or predictions, or build models based on SkillScreen in your research, please cite the SkillScreen paper for the underlying method. Package-Experimental is a separate extension; its package-context results are not reported in that paper. If you release a derived model, please identify SkillScreen as its source and link to the original checkpoint.

@article{huang2026skillscreen,
  title   = {SkillScreen: High-Recall Screening of Malicious Agent Skills with Decision Models},
  author  = {Huang, Jerrold and Quan, Junwei and Lyu, Saiyue and Guo, Zihan and Ge, Yingqiang},
  journal = {arXiv preprint arXiv:2610.17727},
  year    = {2026},
  doi     = {10.48550/arXiv.2610.17727},
  url     = {https://arxiv.org/abs/2610.17727}
}

Machine-readable citation metadata is provided in CITATION.cff. These citation requests do not add conditions to the licenses below.

License

Model weights (including the LoRA adapter and classification head), project-authored code, configuration, and code examples are licensed under Apache-2.0, for rights held by the SkillScreen contributors. The model card, documentation, citation metadata, and released provenance/evaluation reports are licensed under CC BY 4.0.

Research and commercial use, fine-tuning, and redistribution are permitted under these licenses without individual permission requests. Preserve the applicable attribution and license notices, and identify modifications as required by each license.

Upstream OpenJev and Qwen rights and notices remain applicable. See THIRD_PARTY_NOTICES.md, LICENSE-OPENJEV, and LICENSE-QWEN.

The v1.1 revision updates licensing and citation information. Its model weights, adapters, tokenizer, scoring code, and configurations are unchanged from v1.