Downloads · 30 days
16
36% of all-time downloads
modelaudit-coreml-pipeline-specversion-gate-poc
celvexgroup/modelaudit-coreml-pipeline-specversion-gate-poc
modelaudit-coreml-pipeline-specversion-gate-poc is a machine learning model from celvexgroup. Use it for the machine learning task on the model card, and read the license before you ship it in a product.
Coordinated disclosure PoC for huntr (Protect AI MFV). Benign only.
All-time downloads
44
Public
Repo size
476 B
Likes
0
Public
Repo makeup
Click a slice to open those files.
Other1.5 KB · 49%
At a glance
- Access
- Public
- Created
- Jul 18, 2026
- Updated
- Jul 18, 2026
- SHA
- e04f1eec
Model card
From the Hugging Face model README
PoC - modelaudit CoreML custom-layer bypass via Pipeline sub-model specVersion gate (BL-0108)
Coordinated disclosure PoC for huntr (Protect AI MFV). Benign only.
- Scanner: modelaudit==0.2.49 (coreml_scanner.py). Format: Core ML (.mlmodel).
modelaudit scan C_pipeline_hidden_sub_custom.mlmodel-> Clean/exit 0: a custom-layer neural net wrapped as a Pipeline sub-model with its specificationVersion omitted (proto3 default 0) fails the scanner's version gate (coreml_scanner.py:476-478), so the custom-layer check never runs.B_pipeline_valid_sub_custom.mlmodelis byte-identical except a 2-byte specVersion and correctly fires CRITICAL - proving the detector finds custom layers inside pipelines; only the missing version hides it. coremltools still resolves the custom layer in C.- Benign: the custom layer is a harmless marker; no kernel is shipped. Detection-evasion, not standalone RCE.
Files: C_pipeline_hidden_sub_custom.mlmodel (bypass), B_pipeline_valid_sub_custom.mlmodel + A_plain_nn_custom.mlmodel (fire), D_benign_nn.mlmodel (baseline). Full report in huntr submission.
- Created
- Jul 18, 2026
- Updated
- Jul 18, 2026