diffusers-ascend-weight-prep

This utility downloads or reads model metadata and generates fake model weights. It is not inherently malicious, but loading untrusted transformer metadata with trust_remote_code=True can execute repository-supplied Python code, and unchecked metadata component names can affect filesystem paths. Treat untrusted model repositories and metadata as unsafe; severity is moderate. No suspicious hardcoded domains, IP addresses, credentials, or explicit data exfiltration are present.