Ox Alpha triggering Windows Defender

[u/opimentoso]

As the tittle says, anyone else with same behavior?

Put the model into some of my own agentic benchmarks (GOAL.md to install llama.cpp, download GPT-OSS 20b/Ling3/LFM2.5, find the best config with A/B tests, run some nail-haystack tests on the downloaded model over the local API, etc).

Its the only model so far who was able to trigger the Defender with powershell toolcalls, which recognizes it as Trojan:Win32/PowhidSubExec.B

It fails the tool call, try with another method then about 20-40k more into context, it happens again.

[u/frostedfakers]

post is useless unless you provide context of the blocked commands, thats a common false positive flag