Qwen3-0.6B-cmdguard

Qwen3-0.6B-cmdguard

LoRA fine-tune of Qwen/Qwen3-0.6B that classifies CLI commands as exploring (read-only) or mutating (changes state).

Built for coding agents that need to verify whether a shell command is safe before execution.

Usage

from unsloth import FastLanguageModel
from peft import PeftModel

model, tokenizer = FastLanguageModel.from_pretrained(
    model_name="Qwen/Qwen3-0.6B",
    max_seq_length=128,
    load_in_4bit=False,
    dtype=None,
)
model = PeftModel.from_pretrained(model, "qmxme/Qwen3-0.6B-cmdguard")
FastLanguageModel.for_inference(model)

prompt = "<|im_start|>user\nClassify: git status<|im_end|>\n<|im_start|>assistant\n"
inputs = tokenizer(prompt, return_tensors="pt").to(model.device)
outputs = model.generate(**inputs, max_new_tokens=5, do_sample=False)
result = tokenizer.decode(outputs[0][inputs["input_ids"].shape[-1]:], skip_special_tokens=True).strip()
print(result)  # "exploring"

Training

Labels

Limitations

• Trained on common CLI tools — may not generalize to obscure or custom commands
• Binary classification only — does not assess severity or reversibility
• Not a security gate on its own — use as one signal among many