Downloads · 30 days
0
pickle-scanner-evasion-poc
apollosenvy/pickle-scanner-evasion-poc
pickle-scanner-evasion-poc is a machine learning model from apollosenvy. Use it for the machine learning task on the model card, and read the license before you ship it in a product.
This repository is a benign proof-of-concept for a coordinated security disclosure to Hugging Face / Protect AI and the picklescan maintainer. It demonstrates that a crafted pickle can evade the automated model scanne…
Access
Public
Updated Jul 6, 2026
Repo size
148 B
Likes
0
Public
Repo makeup
Click a slice to open those files.
Other1.5 KB · 59%
At a glance
- Access
- Public
- Created
- Jul 6, 2026
- Updated
- Jul 6, 2026
- SHA
- 538fdfce
Model card
From the Hugging Face model README
Pickle model-scanner evasion PoC (BENIGN, coordinated disclosure)
This repository is a benign proof-of-concept for a coordinated security disclosure to Hugging Face / Protect AI and the picklescan maintainer. It demonstrates that a crafted pickle can evade the automated model scanners (picklescan, modelscan) while being structurally capable of code execution.
- The payload is benign. It is
cProfile.run("print(...)"): loading the file only prints a harmless string. It writes no files, opens no sockets, and takes no destructive action. - This exists solely to demonstrate the scanner gap for responsible disclosure. Do not reuse the technique maliciously.
Reported under coordinated disclosure. Contact via the associated huntr / security advisory.
- Created
- Jul 6, 2026
- Updated
- Jul 6, 2026