model-registry-model-security-scanning
Installation
SKILL.md
Model Security Scanning in Model Registries
Security Requirement
Models stored in registries SHOULD be scanned to identify malicious code within them. This is a gate control applied at the registry level, before models are distributed to inference engines.
What to Scan For
| Threat | Detection Approach |
|---|---|
| Pickle-based payloads | Detect Python pickle serialization that can execute arbitrary code |
| Embedded executables | Scan for binary executables or scripts hidden in model files |
| Unsafe serialization | Flag models using formats known to allow code execution on deserialization |
| Anomalous file structure | Detect unexpected files or metadata within the model package |
| Known malware signatures | Match against known malicious model signatures |