picklescan Hugging Face NPY route coverage-gap PoC
This repository contains a small NPY artifact for a huntr Model File
Vulnerability report.
The artifact is intentionally low impact. In the local verification harness,
loading it with numpy.load(..., allow_pickle=True) returns [42]. It does not
create files, start processes, or make network requests.
The local verification script is:
projects/huntr-mfv/scripts/verify_picklescan_hf_npy_route_gap.py