GLM-5.3-Flash-Uncensored
GLMuncensored
from zai-org/GLM-5.3-Flash
↓ 125.8K♥ 31642 repos
GLM-5.3-abliterated
GLM-5.3-abliterated is a refusal-ablated variant of zai-org/GLM-5.3, published on Hugging Face by audnai. It is other licence. It is distributed across 14 repositories in Transformers, GGUF, MLX and FP8 formats, totalling 14.1K downloads.
Specification
- Model name
- GLM-5.3-abliterated
- Source repository
- audnai/penclaw-GLM-5.3-abliterated
- Base model
- zai-org/GLM-5.3
- Publisher
- audnai
- Parameters
- Not determinable from name
- VRAM required
- Unknown — no published parameter count
- Hardware class
- Unknown
- Licence
- other
- Task
- Text generation
- Context window
- Not documented
- Ablation scope
- Not stated by the publisher
- Formats available
- Transformers, GGUF, MLX, FP8, EXL3, NVFP4
- First indexed
- 29 Aug 2026
- Last updated
- 3 Nov 2026
Ablation technique
How GLM-5.3-abliterated was modified, and what that implies.
Abliteration (directional ablation)
The single residual-stream direction that mediates refusal is identified from harmful/harmless prompt pairs and projected out of the model weights.
Reported scope: Not stated by the publisher. Publishers frequently omit this, so verify behaviour empirically rather than assuming full coverage.
Running it
Commands are templates — confirm the exact repository and quant file before use.
llama.cpp / GGUF
hf download huihui-ai/Huihui-GLM-5.3-abliterated-GGUF --local-dir ./glm-5.3-abliterated
llama-cli -m ./glm-5.3-abliterated/<file>.gguf -p "..."Transformers
from transformers import AutoModelForCausalLM, AutoTokenizer
repo = "audnai/penclaw-GLM-5.3-abliterated"
tok = AutoTokenizer.from_pretrained(repo)
model = AutoModelForCausalLM.from_pretrained(
repo, torch_dtype="auto", device_map="auto"
)vLLM
vllm serve audnai/penclaw-GLM-5.3-abliterated --trust-remote-codeDownloads and variants (13)
Every published repository of GLM-5.3-abliterated, including quantised re-releases by other authors.
| Repository | Format | Downloads |
|---|---|---|
| huihui-ai/Huihui-GLM-5.3-abliterated-GGUF | GGUF | 8.6K |
| audnai/penclaw-GLM-5.3-abliteratedsource | Transformers | 3K |
| dealignai/GLM-5.3-ABLITERATED-NVFP4 | MLX | 1.5K |
| drowzeys/keys-GLM-5.3-EXL3-2.75BPW-Abliterated | EXL3 | 190 |
| PenAgent/GLM-5.3-ABLITERATED-NVFP4 | NVFP4 | 158 |
| redkits/GLM-5.3-ABLITERATED-FP8 | FP8 | 155 |
| drowzeys/keys-GLM-5.3-EXL3-Abliterated | EXL3 | 92 |
| redkits/GLM-5.3-ABLITERATED-NVFP4 | NVFP4 | 84 |
| asdadsasdasda/GLM-5.3-ABLITERATED-NVFP4 | NVFP4 | 69 |
| mandeepcheema/glm-5.3-abliterated-nvfp4 | NVFP4 | 63 |
| therickcain/GLM-5.3-ABLITERATED-NVFP4 | NVFP4 | 59 |
| PenAgent/GLM-5.3-ABLITERATED-FP8 | FP8 | 57 |
| hsfdiusdhfiues/GLM-5.3-ABLITERATED-FP8 | FP8 | 53 |
Security-team assessment
Derived from this model’s metadata and the publisher’s claims — not from benchmarks run by this site.
- GLM-5.3-abliterated will attempt offensive-security prompts that a hosted commercial model declines, which is what makes it usable for red-team corpus generation and for measuring what an unaligned model of this class produces.
- The publisher does not state which layers were ablated, so assume nothing about refusal consistency — probe it directly.
- Declared licence is other, but the terms that bind you are zai-org/GLM-5.3’s — a re-release cannot grant more than its parent.
- The source repository is gated, so downloading requires accepting the publisher’s terms.
Handling: run it isolated, put moderation in front of it if anyone outside your team can reach it, and verify the weights before loading — these are third-party artifacts. Full handling and licence guidance.
Metadata for GLM-5.3-abliterated is collected from the public Hugging Face API and the publisher’s model card. This site does not host weights, is not affiliated with audnai, and does not independently verify publisher claims. See responsible use.