XOne - The Open Agentic Studio
Drift inferred · capture-to-capture
No drift recorded — single capability capture; advisories appear once its surface changes.
transport stdio · streamable-http · http counts 11 tools · 0 res
· 0 prompts
permission surface via code analysis
tools
-
export_gguf
-
get_recipe_job_dataset
-
get_recipe_job_status
-
get_training_status
-
list_local_models
-
list_training_runs
-
load_checkpoint
-
start_training
-
stop_training
-
studio_status
-
validate_recipe
prompt-surface
shipped agent-instruction files + hidden-content / dangerous-code findings —
quoted from the analyzed source
analyzed commit 7867e6d · analyzer v33 · 23h ago
danger signals52
- dynamic code execution __import__() abhishekpandaOfficial-XOne-7867e6d/studio/backend/core/training/worker.py :1165
__import__(import_name) - dynamic code execution __import__() abhishekpandaOfficial-XOne-7867e6d/studio/backend/hub/tests/conftest.py :88
__import__(name) - dynamic code execution eval()/exec() abhishekpandaOfficial-XOne-7867e6d/studio/backend/tests/test_browse_denylist.py :68
exec(compile(module, "<extracted studio_db.py>", "exec"), ns) - dynamic code execution eval()/exec() abhishekpandaOfficial-XOne-7867e6d/studio/backend/tests/test_cloudflare_tunnel.py :1294
exec(compile(func_src, "<verify_global_reachability>", "exec"), ns) - dynamic code execution eval()/exec() abhishekpandaOfficial-XOne-7867e6d/studio/backend/tests/test_export_gguf_discovery.py :689
exec( - dynamic code execution eval()/exec() abhishekpandaOfficial-XOne-7867e6d/studio/backend/tests/test_export_imatrix_compressed.py :90
exec(_func_src("core/export/export.py", helper), ns) - dynamic code execution eval()/exec() abhishekpandaOfficial-XOne-7867e6d/studio/backend/tests/test_frontend_resolution.py :47
exec(code, ns) - dynamic code execution pickle.loads() abhishekpandaOfficial-XOne-7867e6d/studio/backend/tests/test_gguf_load_intent_slots.py :80
assert pickle.loads(pickle.dumps(intent)) == intent - dynamic code execution eval()/exec() abhishekpandaOfficial-XOne-7867e6d/studio/backend/tests/test_grouped_mm_rdna4_fallback.py :50
exec(compile(ast.Module(body = fn, type_ignores = []), str(_WORKER_PATH), "exec"), ns) - dynamic code execution eval()/exec() abhishekpandaOfficial-XOne-7867e6d/studio/backend/tests/test_launch_flags_are_capability_gated.py :322
exec(ast.unparse(ast.Module(body = blocks, type_ignores = [])), scope) - dynamic code execution eval()/exec() abhishekpandaOfficial-XOne-7867e6d/studio/backend/tests/test_linux_external_media_paths.py :285
exec(compile(module, "<extracted routes/models.py>", "exec"), ns) - dynamic code execution __import__() abhishekpandaOfficial-XOne-7867e6d/studio/backend/tests/test_llama_cpp_placement.py :27
__import__(name) - dynamic code execution __import__ sink abhishekpandaOfficial-XOne-7867e6d/studio/backend/tests/test_load_progress_ready_fraction.py :173
rss = LlamaCppBackend._read_rss_bytes(__import__("os").getpid()) - dynamic code execution eval()/exec() abhishekpandaOfficial-XOne-7867e6d/studio/backend/tests/test_log_bounds.py :145
phase_bytes = eval(phase.group(1).strip()) # noqa: S307 - digits and '*' only - dynamic code execution eval()/exec() abhishekpandaOfficial-XOne-7867e6d/studio/backend/tests/test_mcp_servers.py :690
exec(f"_TOOL_XML_RE = _re.compile({m.group(1)})", ns) - dynamic code execution eval()/exec() abhishekpandaOfficial-XOne-7867e6d/studio/backend/tests/test_metal_paravirtual_guard.py :591
exec(ast.unparse(ast.Module(body = body, type_ignores = [])), scope) - dynamic code execution __import__ sink abhishekpandaOfficial-XOne-7867e6d/studio/backend/tests/test_mlx_inference_backend.py :478
**__import__("os").environ, - dynamic code execution eval()/exec() abhishekpandaOfficial-XOne-7867e6d/studio/backend/tests/test_mlx_training_worker_config.py :383
exec(block, namespace) - dynamic code execution eval()/exec() abhishekpandaOfficial-XOne-7867e6d/studio/backend/tests/test_offline_gguf_cache_fallback.py :2933
exec(compile(ast.Module([fn], []), "<any_remote>", "exec"), ns) - dynamic code execution eval()/exec() abhishekpandaOfficial-XOne-7867e6d/studio/backend/tests/test_qwen_thinking_size_gate.py :34
exec(_GATE, scope) - dynamic code execution __import__ sink abhishekpandaOfficial-XOne-7867e6d/studio/backend/tests/test_rag_embed_llama_server.py :120
**__import__("os").environ, - dynamic code execution eval()/exec() abhishekpandaOfficial-XOne-7867e6d/studio/backend/tests/test_recommended_folders_has_model.py :61
exec(compile(module, f"<extracted {_models_src}>", "exec"), ns) - dynamic code execution eval()/exec() abhishekpandaOfficial-XOne-7867e6d/studio/backend/tests/test_recommended_folders_permission.py :47
exec(compile(module, f"<extracted {_models_src}>", "exec"), ns) - dynamic code execution eval()/exec() abhishekpandaOfficial-XOne-7867e6d/studio/backend/tests/test_scan_folder_health.py :581
exec(compile(source, __file__, "exec"), namespace) - dynamic code execution eval()/exec() abhishekpandaOfficial-XOne-7867e6d/studio/backend/tests/test_spec_retry_status_signals.py :63
exec(compile(ast.Module([node], []), str(_ROUTE), "exec"), namespace) - dynamic code execution eval()/exec() abhishekpandaOfficial-XOne-7867e6d/studio/backend/tests/test_system_poll_no_cuda_context.py :136
leaked = eval(line[len("LEAKED:") :]) - dynamic code execution eval()/exec() abhishekpandaOfficial-XOne-7867e6d/studio/backend/tests/test_tool_xml_strip.py :53
exec(f"_TOOL_XML_RE = _re.compile({_m.group(1)})", _ns) - dynamic code execution eval()/exec() abhishekpandaOfficial-XOne-7867e6d/studio/backend/tests/test_training_finalizing_phase.py :43
exec(compile(ast.Module([node], []), str(_ROUTES_TRAINING), "exec"), ns) - dynamic code execution pickle.loads() abhishekpandaOfficial-XOne-7867e6d/studio/backend/tests/test_training_progress_callback.py :292
assert pickle.loads(pickle.dumps(events)) == events - dynamic code execution eval()/exec() abhishekpandaOfficial-XOne-7867e6d/studio/backend/tests/test_transformers_latest.py :1041
exec(helpers, ns) - dynamic code execution eval()/exec() abhishekpandaOfficial-XOne-7867e6d/studio/backend/tests/test_vision_cache.py :727
exec(_VISION_CHECK_INLINE_HELPERS, ns) - dynamic code execution eval()/exec() abhishekpandaOfficial-XOne-7867e6d/studio/backend/tests/test_windows_external_drive_paths.py :35
exec(compile(module, "<extracted routes/models.py>", "exec"), ns) - dynamic code execution __import__ sink abhishekpandaOfficial-XOne-7867e6d/studio/backend/tests/test_worker_activates_correct_transformers.py :128
**__import__("os").environ, - dynamic code execution __import__() abhishekpandaOfficial-XOne-7867e6d/studio/backend/utils/ssm_runtime.py :216
__import__(import_name) - dynamic code execution eval()/exec() abhishekpandaOfficial-XOne-7867e6d/tests/_grpo_dispatch_source.py :49
exec(compile(ast.Module(body = wanted, type_ignores = []), str(SOURCE_PATH), "exec"), namespace) - dynamic code execution eval()/exec() abhishekpandaOfficial-XOne-7867e6d/tests/_rl_source.py :76
exec(compile(ast.Module(body = wanted, type_ignores = []), str(SOURCE_PATH), "exec"), namespace) - dynamic code execution __import__() abhishekpandaOfficial-XOne-7867e6d/tests/kaggle/t4_smoke/run_grpo_t4.py :184
module = __import__(path, fromlist = ["*"]) - dynamic code execution eval()/exec() abhishekpandaOfficial-XOne-7867e6d/tests/kaggle/test_studio_gpu_harness.py :2041
exec(compile(fail_report_src, "<fail_report>", "exec"), namespace) - dynamic code execution eval()/exec() abhishekpandaOfficial-XOne-7867e6d/tests/kaggle/test_t4_ci_transport.py :120
exec(compile(source, "<driver-cell>", "exec"), namespace) - dynamic code execution eval()/exec() abhishekpandaOfficial-XOne-7867e6d/tests/kaggle/test_t4_payload_assertions.py :1687
exec(compile(_recapture_recipe(), "<recapture-recipe>", "exec"), {"__name__": "__main__"}) - suspicious endpoint 169.254.169.254 (cloud metadata) abhishekpandaOfficial-XOne-7867e6d/studio/backend/tests/test_gemini_provider.py :1629
"https://169.254.169.254/latest/meta-data", - suspicious endpoint 64.227.100.5 abhishekpandaOfficial-XOne-7867e6d/studio/backend/tests/test_lan_access_settings.py :327
assert status["public_urls"] == ["http://64.227.100.5:8888"] - suspicious endpoint 169.254.169.254 (cloud metadata) abhishekpandaOfficial-XOne-7867e6d/studio/backend/tests/test_permission_mode.py :2465
{"url": "http://169.254.169.254/latest/meta-data/iam/security-credentials/"}, - suspicious endpoint 169.254.169.254 (cloud metadata) abhishekpandaOfficial-XOne-7867e6d/studio/backend/tests/test_provider_base_url_validation.py :402
"http://169.254.169.254/latest/meta-data/iam/security-credentials/", - suspicious endpoint 100.100.100.200 (cloud metadata) abhishekpandaOfficial-XOne-7867e6d/studio/backend/tests/test_provider_base_url_validation.py :410
"http://100.100.100.200/latest/meta-data/", - suspicious endpoint 1.1.1.1 abhishekpandaOfficial-XOne-7867e6d/studio/backend/tests/test_provider_base_url_validation.py :474
assert validate_provider_base_url("https://1.1.1.1/v1") == "https://1.1.1.1/v1" - suspicious endpoint 169.254.169.254 (cloud metadata) abhishekpandaOfficial-XOne-7867e6d/studio/backend/tests/test_sandbox_tools.py :32
'import requests; requests.get("http://169.254.169.254/latest/meta-data/")', - suspicious endpoint 169.254.169.254 (cloud metadata) abhishekpandaOfficial-XOne-7867e6d/studio/backend/tests/test_youtube_transcript.py :169
f"https://169.254.169.254/api/timedtext?v={VIDEO_ID}", - suspicious endpoint 169.254.169.254 (cloud metadata) abhishekpandaOfficial-XOne-7867e6d/tests/security/test_scan_npm_packages.py :491
url = "fetch('http://169.254.169.254/latest/meta-data/iam/security-credentials/role',\n" - committed secret OpenAI key abhishekpandaOfficial-XOne-7867e6d/studio/backend/tests/test_debug_log_redaction.py :112
sk-9f8…(29 chars, redacted) - committed secret GitHub fine-grained PAT abhishekpandaOfficial-XOne-7867e6d/studio/backend/tests/test_llama_cpp_start_failure_classification.py :991
github…(40 chars, redacted) - committed secret HuggingFace token abhishekpandaOfficial-XOne-7867e6d/tests/studio/test_autoload_hf_token_preflight.py :120
hf_sta…(33 chars, redacted)
evidence-backed
findings quoted directly from the published source artifact — not inferred
code files: 4097
filesystem 400
- fs (weak) abhishekpandaOfficial-XOne-7867e6d/.github/scripts/interrupted_install_probe.py :42
from pathlib import Path - fs (weak) abhishekpandaOfficial-XOne-7867e6d/.github/scripts/kaggle_studio_ci/build_kernel.py :51
from pathlib import Path - fs (weak) abhishekpandaOfficial-XOne-7867e6d/.github/scripts/kaggle_studio_ci/collect_evidence.py :32
from pathlib import Path - fs (weak) abhishekpandaOfficial-XOne-7867e6d/.github/scripts/kaggle_studio_ci/report.py :30
from pathlib import Path - fs (weak) abhishekpandaOfficial-XOne-7867e6d/.github/scripts/kaggle_t4_ci/build_kernel.py :55
from pathlib import Path - fs (weak) abhishekpandaOfficial-XOne-7867e6d/.github/scripts/kaggle_t4_ci/check_steps.py :49
from pathlib import Path - fs (weak) abhishekpandaOfficial-XOne-7867e6d/.github/scripts/kaggle_t4_ci/gate.py :196
with open(path, "a", encoding = "utf-8") as fh: - fs (weak) abhishekpandaOfficial-XOne-7867e6d/.github/scripts/kaggle_t4_ci/launch.py :60
import shutil - fs (weak) abhishekpandaOfficial-XOne-7867e6d/.github/scripts/kaggle_t4_ci/legs.py :44
from pathlib import Path - fs (weak) abhishekpandaOfficial-XOne-7867e6d/.github/scripts/kaggle_t4_ci/report.py :23
from pathlib import Path - fs (weak) abhishekpandaOfficial-XOne-7867e6d/scripts/build_prequant_checkpoint.py :26
from pathlib import Path - fs (weak) abhishekpandaOfficial-XOne-7867e6d/scripts/build_te_prequant_checkpoint.py :24
from pathlib import Path
show 28 more
- fs (weak) abhishekpandaOfficial-XOne-7867e6d/scripts/check_frontend_dep_removal.py :33
from pathlib import Path - fs (weak) abhishekpandaOfficial-XOne-7867e6d/scripts/check_new_install_scripts.py :29
from pathlib import Path - fs (weak) abhishekpandaOfficial-XOne-7867e6d/scripts/compare_engines.py :21
from pathlib import Path - fs (weak) abhishekpandaOfficial-XOne-7867e6d/scripts/compile_probe.py :22
from pathlib import Path - fs (weak) abhishekpandaOfficial-XOne-7867e6d/scripts/diffusion_bench.py :41
from pathlib import Path - fs (weak) abhishekpandaOfficial-XOne-7867e6d/scripts/diffusion_quality.py :40
from pathlib import Path - fs (weak) abhishekpandaOfficial-XOne-7867e6d/scripts/enforce_kwargs_spacing.py :19
from pathlib import Path - fs (weak) abhishekpandaOfficial-XOne-7867e6d/scripts/fbcache_flux_probe.py :15
from pathlib import Path - fs (weak) abhishekpandaOfficial-XOne-7867e6d/scripts/fp8_overflow_check.py :17
from pathlib import Path - fs (weak) abhishekpandaOfficial-XOne-7867e6d/scripts/image_speedmem_bench.py :42
from pathlib import Path - fs (weak) abhishekpandaOfficial-XOne-7867e6d/scripts/int8_linear_probe.py :13
from pathlib import Path - fs (weak) abhishekpandaOfficial-XOne-7867e6d/scripts/leverage_probe.py :19
from pathlib import Path - fs (weak) abhishekpandaOfficial-XOne-7867e6d/scripts/lint_backend_python_floor.py :33
import shutil - fs (weak) abhishekpandaOfficial-XOne-7867e6d/scripts/lint_duplicate_definitions.py :71
from pathlib import Path - fs (weak) abhishekpandaOfficial-XOne-7867e6d/scripts/lint_no_parallel_clamp.py :39
from pathlib import Path - fs (weak) abhishekpandaOfficial-XOne-7867e6d/scripts/lint_workflow_triggers.py :28
from pathlib import Path, PurePosixPath - fs (weak) abhishekpandaOfficial-XOne-7867e6d/scripts/lockfile_supply_chain_audit.py :32
from pathlib import Path - fs (weak) abhishekpandaOfficial-XOne-7867e6d/scripts/make_dmg_background.py :23
from pathlib import Path - fs (weak) abhishekpandaOfficial-XOne-7867e6d/scripts/notebook_to_python.py :10
%%file filename -> with open('filename', 'w') as f: f.write(...) - fs (weak) abhishekpandaOfficial-XOne-7867e6d/scripts/notebook_validator.py :39
import pathlib - fs (weak) abhishekpandaOfficial-XOne-7867e6d/scripts/nvfp4_probe.py :13
from pathlib import Path - fs (weak) abhishekpandaOfficial-XOne-7867e6d/scripts/nvfp4_t211_probe.py :21
from pathlib import Path - fs (weak) abhishekpandaOfficial-XOne-7867e6d/scripts/online_tokenization_ab.py :25
from pathlib import Path - fs (weak) abhishekpandaOfficial-XOne-7867e6d/scripts/perf_levers_probe.py :22
from pathlib import Path - fs (weak) abhishekpandaOfficial-XOne-7867e6d/scripts/perf_verify.py :25
from pathlib import Path - fs (weak) abhishekpandaOfficial-XOne-7867e6d/scripts/prequant_probe.py :23
from pathlib import Path - fs (weak) abhishekpandaOfficial-XOne-7867e6d/scripts/profile_startup.py :39
import shutil - fs (weak) abhishekpandaOfficial-XOne-7867e6d/scripts/quant_probe.py :22
from pathlib import Path
360 more not shown — this panel samples each group; the count above is the real total.
shell / exec 260
- shell (weak) abhishekpandaOfficial-XOne-7867e6d/.github/scripts/interrupted_install_probe.py :37
import subprocess - shell (weak) abhishekpandaOfficial-XOne-7867e6d/.github/scripts/kaggle_studio_ci/build_kernel.py :192
proc = subprocess.run(cmd, cwd=cwd, capture_output=True, text=True, - shell (weak) abhishekpandaOfficial-XOne-7867e6d/.github/scripts/kaggle_t4_ci/build_kernel.py :202
proc = subprocess.run(cmd, capture_output=True, text=True) - shell (weak) abhishekpandaOfficial-XOne-7867e6d/.github/scripts/kaggle_t4_ci/launch.py :63
import subprocess - shell (weak) abhishekpandaOfficial-XOne-7867e6d/.github/scripts/resolve-desktop-release.py :12
import subprocess - shell (weak) abhishekpandaOfficial-XOne-7867e6d/scripts/check_frontend_dep_removal.py :30
import subprocess - shell (weak) abhishekpandaOfficial-XOne-7867e6d/scripts/diffusion_bench.py :37
import subprocess - shell (weak) abhishekpandaOfficial-XOne-7867e6d/scripts/lint_backend_python_floor.py :34
import subprocess - shell (weak) abhishekpandaOfficial-XOne-7867e6d/scripts/lint_duplicate_definitions.py :67
import subprocess - shell (weak) abhishekpandaOfficial-XOne-7867e6d/scripts/make_dmg_background.py :21
import subprocess - shell (weak) abhishekpandaOfficial-XOne-7867e6d/scripts/notebook_to_python.py :7
!command -> subprocess.run('command', shell=True) - shell (weak) abhishekpandaOfficial-XOne-7867e6d/scripts/notebook_validator.py :42
import subprocess
show 28 more
- shell (weak) abhishekpandaOfficial-XOne-7867e6d/scripts/profile_startup.py :42
import subprocess - shell (weak) abhishekpandaOfficial-XOne-7867e6d/scripts/run_ruff_format.py :8
import subprocess - shell (weak) abhishekpandaOfficial-XOne-7867e6d/scripts/scan_packages.py :68
import subprocess - shell (weak) abhishekpandaOfficial-XOne-7867e6d/scripts/stamp_studio_release.py :12
import subprocess - shell (weak) abhishekpandaOfficial-XOne-7867e6d/scripts/verify_comment_only_diff.py :44
import subprocess - shell (weak) abhishekpandaOfficial-XOne-7867e6d/scripts/verify_import_hoist.py :52
import subprocess - shell abhishekpandaOfficial-XOne-7867e6d/studio/backend/cloudflare_tunnel.py :20
import subprocess - shell abhishekpandaOfficial-XOne-7867e6d/studio/backend/core/data_recipe/local_callable_validators.py :9
import subprocess - shell abhishekpandaOfficial-XOne-7867e6d/studio/backend/core/export/orchestrator.py :51
# Local state mirrors (updated from subprocess responses). - shell abhishekpandaOfficial-XOne-7867e6d/studio/backend/core/inference/diffusion_attention.py :518
import subprocess - shell abhishekpandaOfficial-XOne-7867e6d/studio/backend/core/inference/llama_cpp.py :25
import subprocess - shell abhishekpandaOfficial-XOne-7867e6d/studio/backend/core/inference/llama_server_args.py :177
import subprocess - shell abhishekpandaOfficial-XOne-7867e6d/studio/backend/core/inference/mcp_client.py :124
import subprocess - shell abhishekpandaOfficial-XOne-7867e6d/studio/backend/core/inference/orchestrator.py :268
# Local state mirrors (updated from subprocess responses) - shell abhishekpandaOfficial-XOne-7867e6d/studio/backend/core/inference/sd_cpp_backend.py :210
import subprocess - shell abhishekpandaOfficial-XOne-7867e6d/studio/backend/core/inference/sd_cpp_engine.py :23
import subprocess - shell abhishekpandaOfficial-XOne-7867e6d/studio/backend/core/inference/sd_cpp_server.py :39
import subprocess - shell abhishekpandaOfficial-XOne-7867e6d/studio/backend/core/inference/stt_download_worker.py :17
import subprocess - shell abhishekpandaOfficial-XOne-7867e6d/studio/backend/core/inference/stt_ggml_sidecar.py :33
import subprocess - shell abhishekpandaOfficial-XOne-7867e6d/studio/backend/core/inference/stt_mtmd_sidecar.py :21
import subprocess - shell abhishekpandaOfficial-XOne-7867e6d/studio/backend/core/inference/stt_sidecar.py :29
import subprocess - shell abhishekpandaOfficial-XOne-7867e6d/studio/backend/core/inference/tools.py :29
import subprocess - shell abhishekpandaOfficial-XOne-7867e6d/studio/backend/core/rag/embed_llama_server.py :22
import subprocess - shell abhishekpandaOfficial-XOne-7867e6d/studio/backend/core/training/training.py :1106
# Progress state (updated by pump thread from subprocess events) - shell abhishekpandaOfficial-XOne-7867e6d/studio/backend/core/training/worker.py :26
import subprocess as _sp - shell abhishekpandaOfficial-XOne-7867e6d/studio/backend/hub/services/download_lifecycle.py :9
import subprocess - shell abhishekpandaOfficial-XOne-7867e6d/studio/backend/hub/services/models/downloads.py :39
import subprocess - shell (weak) abhishekpandaOfficial-XOne-7867e6d/studio/backend/hub/tests/test_model_services.py :5396
import subprocess
220 more not shown — this panel samples each group; the count above is the real total.
network 262
- net (weak) abhishekpandaOfficial-XOne-7867e6d/.github/scripts/interrupted_install_probe.py :36
import socket - net (weak) abhishekpandaOfficial-XOne-7867e6d/.github/scripts/kaggle_t4_ci/gate.py :58
import socket - net (weak) abhishekpandaOfficial-XOne-7867e6d/.github/scripts/kaggle_t4_ci/launch.py :62
import socket - net (weak) abhishekpandaOfficial-XOne-7867e6d/scripts/check_new_install_scripts.py :26
import urllib.error - net (weak) abhishekpandaOfficial-XOne-7867e6d/scripts/lint_duplicate_definitions.py :44
`import urllib.parse` / `import urllib.request` and `from a import x` / `from b import x` - net (weak) abhishekpandaOfficial-XOne-7867e6d/scripts/notebook_to_python.py :20
import urllib.request - net (weak) abhishekpandaOfficial-XOne-7867e6d/scripts/notebook_validator.py :47
import urllib.error - net (weak) abhishekpandaOfficial-XOne-7867e6d/scripts/profile_startup.py :40
import socket - net (weak) abhishekpandaOfficial-XOne-7867e6d/scripts/scan_npm_packages.py :54
import urllib.parse - net (weak) abhishekpandaOfficial-XOne-7867e6d/scripts/scan_packages.py :73
import urllib.parse - net (weak) abhishekpandaOfficial-XOne-7867e6d/scripts/virustotal_scan.py :28
import urllib.error - net abhishekpandaOfficial-XOne-7867e6d/studio/backend/cloudflare_tunnel.py :171
import urllib.request
show 28 more
- net abhishekpandaOfficial-XOne-7867e6d/studio/backend/colab.py :422
import json, urllib.request - net abhishekpandaOfficial-XOne-7867e6d/studio/backend/core/export/export.py :489
# subprocess, and local_files_only makes detect_audio_type's requests.get skip. - net abhishekpandaOfficial-XOne-7867e6d/studio/backend/core/inference/diffusion_compat.py :205
"""The response body in chunks, from httpx's reader or requests'.""" - net abhishekpandaOfficial-XOne-7867e6d/studio/backend/core/inference/external_provider.py :17
from urllib.parse import urlparse, urlsplit, urlunsplit - net abhishekpandaOfficial-XOne-7867e6d/studio/backend/core/inference/llama_cpp.py :24
import socket - net abhishekpandaOfficial-XOne-7867e6d/studio/backend/core/inference/llama_http.py :4
"""Shared pooled httpx.AsyncClient for NON-streaming calls to the local llama-server. - net abhishekpandaOfficial-XOne-7867e6d/studio/backend/core/inference/llama_stats.py :16
import urllib.request - net abhishekpandaOfficial-XOne-7867e6d/studio/backend/core/inference/mcp_client.py :22
from urllib.parse import urlsplit, urlunsplit - net abhishekpandaOfficial-XOne-7867e6d/studio/backend/core/inference/openai_codex_auth.py :21
from urllib.parse import parse_qs, urlencode, urlparse - net abhishekpandaOfficial-XOne-7867e6d/studio/backend/core/inference/openai_codex_client.py :17
from urllib.parse import urlparse - net abhishekpandaOfficial-XOne-7867e6d/studio/backend/core/inference/orchestrator.py :326
httpx.get, so HF_HUB_OFFLINE does not reach it on its own. Via hf_env_offline(), not - net abhishekpandaOfficial-XOne-7867e6d/studio/backend/core/inference/providers.py :17
from urllib.parse import quote, urlsplit - net abhishekpandaOfficial-XOne-7867e6d/studio/backend/core/inference/sd_cpp_server.py :38
import socket - net abhishekpandaOfficial-XOne-7867e6d/studio/backend/core/inference/search_images.py :84
from urllib.parse import urlparse - net abhishekpandaOfficial-XOne-7867e6d/studio/backend/core/inference/stt_ggml_sidecar.py :32
import socket - net abhishekpandaOfficial-XOne-7867e6d/studio/backend/core/inference/stt_mtmd_sidecar.py :20
import socket - net abhishekpandaOfficial-XOne-7867e6d/studio/backend/core/inference/stt_sidecar.py :28
import socket - net abhishekpandaOfficial-XOne-7867e6d/studio/backend/core/inference/tool_loop_controller.py :18
from urllib.parse import urlparse - net abhishekpandaOfficial-XOne-7867e6d/studio/backend/core/inference/tools.py :63
import urllib.parse - net abhishekpandaOfficial-XOne-7867e6d/studio/backend/core/inference/web_access_policy.py :13
from urllib.parse import urlsplit - net abhishekpandaOfficial-XOne-7867e6d/studio/backend/core/rag/captioner.py :115
import httpx - net abhishekpandaOfficial-XOne-7867e6d/studio/backend/core/rag/embed_llama_server.py :29
import httpx - net abhishekpandaOfficial-XOne-7867e6d/studio/backend/core/research_runs.py :19
import httpx - net abhishekpandaOfficial-XOne-7867e6d/studio/backend/core/training/provenance.py :11
from urllib.parse import unquote, urlsplit - net abhishekpandaOfficial-XOne-7867e6d/studio/backend/core/youtube_transcript.py :22
from urllib.parse import SplitResult, parse_qs, urlencode, urljoin, urlsplit, urlunsplit - net abhishekpandaOfficial-XOne-7867e6d/studio/backend/hub/services/models/common.py :13
from urllib.parse import quote - net abhishekpandaOfficial-XOne-7867e6d/studio/backend/hub/services/models/ollama.py :24
from urllib.parse import quote, unquote - net abhishekpandaOfficial-XOne-7867e6d/studio/backend/hub/utils/download_manifest.py :43
from urllib.parse import unquote
222 more not shown — this panel samples each group; the count above is the real total.
secrets 42
- secrets (weak) abhishekpandaOfficial-XOne-7867e6d/.github/scripts/kaggle_t4_ci/gate.py :596
if not os.environ.get("KAGGLE_API_TOKEN"): - secrets (weak) abhishekpandaOfficial-XOne-7867e6d/.github/scripts/kaggle_t4_ci/launch.py :723
token = os.environ.get("KAGGLE_API_TOKEN") - secrets (weak) abhishekpandaOfficial-XOne-7867e6d/.github/scripts/studio_smoke/multi_turn_chat.py :44
return os.environ["BASE_URL"], os.environ["TOKEN"] # a JWT is accepted as Bearer - secrets (weak) abhishekpandaOfficial-XOne-7867e6d/scripts/diffusion_bench.py :213
hf_token = os.environ.get("HF_TOKEN"), - secrets (weak) abhishekpandaOfficial-XOne-7867e6d/scripts/diffusion_quality.py :206
info = HfApi().model_info(repo, files_metadata = True, token = os.environ.get("HF_TOKEN")) - secrets (weak) abhishekpandaOfficial-XOne-7867e6d/scripts/fbcache_flux_probe.py :51
BASE, torch_dtype = torch.bfloat16, token = os.environ.get("HF_TOKEN") - secrets (weak) abhishekpandaOfficial-XOne-7867e6d/scripts/int8_linear_probe.py :32
tok = os.environ.get("HF_TOKEN") - secrets (weak) abhishekpandaOfficial-XOne-7867e6d/scripts/perf_verify.py :64
token = os.environ.get("HF_TOKEN") - secrets abhishekpandaOfficial-XOne-7867e6d/studio/backend/core/inference/mlx_inference.py :1482
os.environ["HF_TOKEN"] = hf_token - secrets abhishekpandaOfficial-XOne-7867e6d/studio/backend/core/inference/stt_download_worker.py :142
token = os.environ.get("HF_TOKEN") or None - secrets abhishekpandaOfficial-XOne-7867e6d/studio/backend/core/rag/embed_llama_server.py :376
token = os.environ.get("HF_TOKEN") or None - secrets abhishekpandaOfficial-XOne-7867e6d/studio/backend/core/training/trainer.py :351
os.environ["HF_TOKEN"] = hf_token
show 28 more
- secrets abhishekpandaOfficial-XOne-7867e6d/studio/backend/core/training/worker.py :2774
os.environ["HF_TOKEN"] = hf_token - secrets abhishekpandaOfficial-XOne-7867e6d/studio/backend/hub/services/download_lifecycle.py :212
hf_token = os.environ.get("HF_TOKEN") or None - secrets abhishekpandaOfficial-XOne-7867e6d/studio/backend/hub/workers/hf_download.py :985
hf_token = os.environ.get("HF_TOKEN") or None - secrets abhishekpandaOfficial-XOne-7867e6d/studio/backend/main.py :817
_mcp_token = os.environ.get("UNSLOTH_STUDIO_MCP_TOKEN") - secrets abhishekpandaOfficial-XOne-7867e6d/studio/backend/plugins/data-designer-github-repo-seed/src/data_designer_github_repo_seed/scraper.py :62
if os.environ.get("GH_TOKEN"): - secrets abhishekpandaOfficial-XOne-7867e6d/studio/backend/plugins/data-designer-github-repo-seed/src/data_designer_github_repo_seed/scraper_impl/gh_client.py :64
elif os.environ.get("GH_TOKEN"): - secrets abhishekpandaOfficial-XOne-7867e6d/studio/backend/routes/data_recipe/seed.py :798
has_token = bool(os.environ.get("GH_TOKEN") or os.environ.get("GITHUB_TOKEN")) - secrets abhishekpandaOfficial-XOne-7867e6d/studio/backend/routes/inference.py :6034
hf_token = os.environ.get("HF_TOKEN"), - secrets (weak) abhishekpandaOfficial-XOne-7867e6d/studio/backend/tests/conftest.py :700
api_key = os.environ.get("UNSLOTH_E2E_API_KEY") - secrets (weak) abhishekpandaOfficial-XOne-7867e6d/studio/backend/tests/test_bypass_permissions.py :191
" 'T=' + str(os.environ.get('HF_TOKEN')))" - secrets (weak) abhishekpandaOfficial-XOne-7867e6d/studio/backend/tests/test_providers_api.py :39
PASSWORD = os.getenv("STUDIO_TEST_PASSWORD", "") - secrets (weak) abhishekpandaOfficial-XOne-7867e6d/studio/backend/tests/test_sandbox_tools.py :2008
'huggingface_hub.upload_file(path_or_fileobj=os.environ["HF_TOKEN"],' - secrets abhishekpandaOfficial-XOne-7867e6d/studio/backend/utils/datasets/dataset_none_detect.py :817
default = os.environ.get("HF_TOKEN"), - secrets abhishekpandaOfficial-XOne-7867e6d/studio/backend/utils/models/model_config.py :1432
token = hf_token or os.environ.get("HF_TOKEN") - secrets abhishekpandaOfficial-XOne-7867e6d/studio/backend/utils/paths/external_media.py :8
import getpass - secrets abhishekpandaOfficial-XOne-7867e6d/studio/backend/utils/prebuilt/freshness_flow.py :151
token = os.environ.get("GITHUB_TOKEN") or os.environ.get("GH_TOKEN") - secrets abhishekpandaOfficial-XOne-7867e6d/studio/backend/utils/utils.py :676
saved_disable = os.environ.get("HF_HUB_DISABLE_IMPLICIT_TOKEN") - secrets abhishekpandaOfficial-XOne-7867e6d/studio/install_sd_cpp_prebuilt.py :327
token = token or os.environ.get("GH_TOKEN") or os.environ.get("GITHUB_TOKEN") - secrets abhishekpandaOfficial-XOne-7867e6d/studio/prebuilt_core.py :349
token = os.environ.get("GH_TOKEN") or os.environ.get("GITHUB_TOKEN") - secrets (weak) abhishekpandaOfficial-XOne-7867e6d/tests/saving/language_models/test_push_to_hub_merged.py :154
hf_token = os.environ.get("HF_TOKEN", "") - secrets (weak) abhishekpandaOfficial-XOne-7867e6d/tests/saving/language_models/test_push_to_hub_merged_sharded_index_file.py :156
hf_token = os.environ.get("HF_TOKEN", "") - secrets (weak) abhishekpandaOfficial-XOne-7867e6d/tests/saving/vision_models/test_index_file_sharded_model.py :207
hf_token = os.environ.get("HF_TOKEN", "") - secrets (weak) abhishekpandaOfficial-XOne-7867e6d/tests/saving/vision_models/test_push_to_hub_merged.py :213
hf_token = os.environ.get("HF_TOKEN", "") - secrets (weak) abhishekpandaOfficial-XOne-7867e6d/tests/security/test_scan_packages.py :566
src = 'import os, httpx2\nk = os.environ.get("OPENAI_API_KEY")\nhttpx2.Client().get(u)\n' - secrets (weak) abhishekpandaOfficial-XOne-7867e6d/tests/studio/appimage_model_download_webdriver.py :129
token = os.environ.get("UNSLOTH_STUDIO_DESKTOP_OWNER_TOKEN", "") - secrets (weak) abhishekpandaOfficial-XOne-7867e6d/tests/studio/appimage_portability_smoke.py :57
token = os.environ.get("UNSLOTH_STUDIO_DESKTOP_OWNER_TOKEN", "") - secrets (weak) abhishekpandaOfficial-XOne-7867e6d/tests/studio/run_real_mlx_smoke.py :188
hf_token = os.environ.get("HF_TOKEN") or None - secrets (weak) abhishekpandaOfficial-XOne-7867e6d/tests/version_compat/_fetch.py :19
token = os.environ.get("GITHUB_TOKEN") or os.environ.get("GH_TOKEN")
2 more not shown — this panel samples each group; the count above is the real total.
database 39
- db abhishekpandaOfficial-XOne-7867e6d/studio/backend/auth/storage.py :13
import sqlite3 - db abhishekpandaOfficial-XOne-7867e6d/studio/backend/core/rag/folder_sync.py :12
import sqlite3 - db abhishekpandaOfficial-XOne-7867e6d/studio/backend/core/rag/retrieval.py :10
import sqlite3 - db abhishekpandaOfficial-XOne-7867e6d/studio/backend/core/rag/store.py :16
import sqlite3 - db abhishekpandaOfficial-XOne-7867e6d/studio/backend/core/research_runs.py :12
import sqlite3 - db abhishekpandaOfficial-XOne-7867e6d/studio/backend/hub/storage/scan_folders.py :13
import sqlite3 - db abhishekpandaOfficial-XOne-7867e6d/studio/backend/routes/chat_history.py :12
import sqlite3 - db abhishekpandaOfficial-XOne-7867e6d/studio/backend/routes/rag.py :25
import sqlite3 - db abhishekpandaOfficial-XOne-7867e6d/studio/backend/routes/research_runs.py :11
import sqlite3 - db abhishekpandaOfficial-XOne-7867e6d/studio/backend/storage/credential_secrets.py :15
import sqlite3 - db abhishekpandaOfficial-XOne-7867e6d/studio/backend/storage/mcp_servers_db.py :4
import sqlite3 - db abhishekpandaOfficial-XOne-7867e6d/studio/backend/storage/providers_db.py :18
import sqlite3
show 27 more
- db abhishekpandaOfficial-XOne-7867e6d/studio/backend/storage/rag_db.py :20
import sqlite3 - db abhishekpandaOfficial-XOne-7867e6d/studio/backend/storage/research_runs_db.py :10
import sqlite3 - db abhishekpandaOfficial-XOne-7867e6d/studio/backend/storage/studio_db.py :17
import sqlite3 - db (weak) abhishekpandaOfficial-XOne-7867e6d/studio/backend/tests/test_chat_attachments.py :7
import sqlite3 - db (weak) abhishekpandaOfficial-XOne-7867e6d/studio/backend/tests/test_chat_history_routes.py :8
import sqlite3 - db (weak) abhishekpandaOfficial-XOne-7867e6d/studio/backend/tests/test_chat_history_storage.py :7
import sqlite3 - db (weak) abhishekpandaOfficial-XOne-7867e6d/studio/backend/tests/test_chat_thread_settings.py :11
import sqlite3 - db (weak) abhishekpandaOfficial-XOne-7867e6d/studio/backend/tests/test_checkpoint_compaction.py :1519
import sqlite3 - db (weak) abhishekpandaOfficial-XOne-7867e6d/studio/backend/tests/test_checkpoints_scan.py :5
import sqlite3 - db (weak) abhishekpandaOfficial-XOne-7867e6d/studio/backend/tests/test_credential_secrets.py :11
import sqlite3 - db (weak) abhishekpandaOfficial-XOne-7867e6d/studio/backend/tests/test_desktop_auth.py :8
import sqlite3 - db (weak) abhishekpandaOfficial-XOne-7867e6d/studio/backend/tests/test_external_tools_compat.py :22
import sqlite3 - db (weak) abhishekpandaOfficial-XOne-7867e6d/studio/backend/tests/test_permission_mode.py :1768
"import sqlite3\nsqlite3.connect('results.db').execute('create table t(x)')", - db (weak) abhishekpandaOfficial-XOne-7867e6d/studio/backend/tests/test_provider_max_output_tokens_contract.py :23
import sqlite3 - db (weak) abhishekpandaOfficial-XOne-7867e6d/studio/backend/tests/test_providers_db_models.py :8
import sqlite3 - db (weak) abhishekpandaOfficial-XOne-7867e6d/studio/backend/tests/test_rag_embedding_identity.py :429
import sqlite3 - db (weak) abhishekpandaOfficial-XOne-7867e6d/studio/backend/tests/test_rag_ingestion.py :7
import sqlite3 - db (weak) abhishekpandaOfficial-XOne-7867e6d/studio/backend/tests/test_rag_job_events_queue_lifecycle.py :14
import sqlite3 - db (weak) abhishekpandaOfficial-XOne-7867e6d/studio/backend/tests/test_rag_linked_folders.py :11
import sqlite3 - db (weak) abhishekpandaOfficial-XOne-7867e6d/studio/backend/tests/test_rag_store.py :7
import sqlite3 - db (weak) abhishekpandaOfficial-XOne-7867e6d/studio/backend/tests/test_rag_unavailable_quiet.py :19
import sqlite3 - db (weak) abhishekpandaOfficial-XOne-7867e6d/studio/backend/tests/test_research_runs_storage.py :6
import sqlite3 - db (weak) abhishekpandaOfficial-XOne-7867e6d/studio/backend/tests/test_sandbox_files_and_storage_roots.py :4870
import sqlite3 - db (weak) abhishekpandaOfficial-XOne-7867e6d/studio/backend/tests/test_web_rank.py :62
import sqlite3 - db (weak) abhishekpandaOfficial-XOne-7867e6d/tests/studio/sim_thread_settings_portability.py :21
import sqlite3 - db abhishekpandaOfficial-XOne-7867e6d/unsloth_cli/commands/studio.py :17
import sqlite3 - db (weak) abhishekpandaOfficial-XOne-7867e6d/unsloth_cli/tests/test_studio_password_prompt.py :15
import sqlite3
tool registrations 11
- studio_status abhishekpandaOfficial-XOne-7867e6d/studio/backend/mcp_server.py :97
- list_local_models abhishekpandaOfficial-XOne-7867e6d/studio/backend/mcp_server.py :119
- get_training_status abhishekpandaOfficial-XOne-7867e6d/studio/backend/mcp_server.py :125
- start_training abhishekpandaOfficial-XOne-7867e6d/studio/backend/mcp_server.py :131
- stop_training abhishekpandaOfficial-XOne-7867e6d/studio/backend/mcp_server.py :144
- list_training_runs abhishekpandaOfficial-XOne-7867e6d/studio/backend/mcp_server.py :155
- validate_recipe abhishekpandaOfficial-XOne-7867e6d/studio/backend/mcp_server.py :165
- get_recipe_job_status abhishekpandaOfficial-XOne-7867e6d/studio/backend/mcp_server.py :176
- get_recipe_job_dataset abhishekpandaOfficial-XOne-7867e6d/studio/backend/mcp_server.py :182
- load_checkpoint abhishekpandaOfficial-XOne-7867e6d/studio/backend/mcp_server.py :196
- export_gguf abhishekpandaOfficial-XOne-7867e6d/studio/backend/mcp_server.py :226
declared dependencies 78
- typer@>=0.12.0
- rich@*
- pydantic@*
- pyyaml@*
- nest-asyncio@*
- huggingface-hub@>=0.34.0
- structlog@>=24.1.0
- click@>=8.0
- 3.10@*
- triton@>=3.0.0 ; (
- in@sys_platform)
- triton-windows@; (sys_platform ==
show 28 more
- or@platform_machine ==
- unsloth_zoo@>=2026.8.15
- wheel@>=0.42.0
- packaging@*
- numpy@*
- tqdm@*
- psutil@*
- tyro@*
- protobuf@*
- sentencepiece@>=0.2.0
- datasets@>=3.4.1,!=4.0.*,!=4.1.0,<4.4.0
- accelerate@>=0.34.1
- peft@>=0.18.0,!=0.11.0
- huggingface_hub@>=0.34.0
- hf_transfer@*
- torchcodec@>=0.10.0,<0.11.0 ; python_version >=
- and@(((sys_platform ==
- unsloth@*
- torchvision@*
- bitsandbytes@>=0.45.5,!=0.46.0,!=0.48.0 ; (sys_platform ==
- xformers@>=0.0.22.post7 ; (sys_platform ==
- ninja@*
- flash-attn@>=2.6.3 ; (
- transformers@>=4.51.3,!=4.52.0,!=4.52.1,!=4.52.2,!=4.52.3,!=4.53.0,!=4.54.0,!=4.55.0,!=4.55.1,!=4.57.0,!=4.57.4,!=4.57.5,!=5.0.0,!=5.1.0,<=5.5.0
- sentence-transformers@*
- trl@>=0.18.2,!=0.19.0,<=0.24.0
- linux@*
- 3.11@*
38 more not shown — this panel samples each group; the count above is the real total.
obfuscation 1
- base64 decode → exec sink abhishekpandaOfficial-XOne-7867e6d/.github/scripts/kaggle_studio_ci/build_kernel.py :369
(WORK / {json.dumps(PAYLOAD_NOTEBOOK)}).write_bytes(gzip.decompress(base64.b64decode(PAYLOAD)))
transport_posture 3
- binds all interfaces (0.0.0.0) abhishekpandaOfficial-XOne-7867e6d/studio/backend/colab.py :664
host = "0.0.0.0", - network-listening, binds all interfaces, no auth detected abhishekpandaOfficial-XOne-7867e6d/studio/backend/tests/test_bootstrap_timeout.py :59
host = "0.0.0.0", - network-listening, binds all interfaces, no auth detected abhishekpandaOfficial-XOne-7867e6d/tests/python/test_unsloth_run_tool_policy_resolver.py :62
host = "0.0.0.0",