Open source and research

介紹

機器學習模型檔案的安全掃描器：偵測 pickle、GGUF、ONNX、Keras 以及其他檢查點中的程式碼執行。

AI 翻譯

取自儲存庫 README

README

正在載入完整 README。 以下為已儲存的摘錄。

Security scanner for machine-learning model files. Know whether a checkpoint will run code on your machine, before you load it. Or try it in your browser. Same scanner, compiled to WebAssembly. Drop a checkpoint on the page and it stays on your machine. torch.load, joblib.load and numpy.load(allow_pickle=True) execute code from the file they read. That is not a bug, it is what pickle does. The file is named pytorch_model.bin, and the .bin is doing a lot of work in that sentence. It is a program. Loading it is running it, on your laptop, with your credentials, as you.