Model page

sayhan/Mistral_Pro_8B_v0.1-GGUF warn

Weights only ship in a format that can run code when loaded.

Could not load this model from the Hugging Face API (private, gated, or nonexistent). Findings below are from our archive.

Scan coverageStatic battery2026-08-25Weights batteryqueuedBehavioral batterynot rundetails
BatteryLooks atStatus
Static batteryMetadata & packagingcomplete 2026-08-25
Weights batteryWeights forensics — no GPU, no downloadqueued
Behavioral batteryLive-inference differentialsnot run

Ingot runs three batteries against a model. What each one checks →

Findings

Scanned 2026-08-25 · published from a community scan.

medium Pickle-serialized weights, no safetensors

Weights ship only as pickle-based files (mistral_pro_8b_v0.1.fp16.bin). Loading pickle executes arbitrary code from the file — prefer a safetensors release or load in a sandbox.

How to fix

Convert the weights to safetensors before loading them anywhere that matters.

  1. Do not load the pickle files in-process — pickle deserialization executes arbitrary code from the file.
  2. Convert locally in a sandbox: `pip install safetensors` and use `safetensors.torch.save_file` on a state dict loaded with `torch.load(..., weights_only=True)` (refuses most code-execution payloads), or use Hugging Face's `convert.py` space/script.
  3. Pin the exact revision hash you converted from, and load only your converted safetensors artifact from then on.

Remediation guidance addresses the documented findings only. It is evidence-driven repair, not a safety certification of the model.

Fingerprint

The durable profile of this model: measured weights-and-metadata facts, rebuilt on every scan and battery run. Updated 2026-08-25.

licenseapache-2.0
serializationgguf pickle
chat templatenone
claimed lineageTencentARC/Mistral_Pro_8B_v0.1
lineage verifiedunverified — weights battery pending
Full measured fingerprint
librarytransformers
pipelinetext-generation
repo files15 — pickle: mistral_pro_8b_v0.1.fp16.bin
revisionfd939871f5f4
HF snapshot72 downloads · 2 likes · updated 2024-02-24 · captured 2026-08-25
Battery runs (1)the run trace behind the findings — what each job measured
batterystatusqueueddurationattempts
weightsqueued2026-08-25 21:560

Verdict badge

Ship the verdict in your README — it always shows the latest published analysis:

Ingot verdict: warn

[![Ingot scan](https://ingot.tools/api/v1/models/sayhan/Mistral_Pro_8B_v0.1-GGUF/badge.svg)](https://ingot.tools/models/sayhan/Mistral_Pro_8B_v0.1-GGUF)
Gate it in CI