Views
No views yet
model_CTF{model_scanner_high_pickle_evidence}.pt contains a Python protocol-2 pickle reducer
for __builtin__.set. Loading it constructs only a normal set of
static strings, including CTF_MODEL_CANARY.static-canary-pt-loader-risk*.safetensors files are valid
safetensors fixtures with static metadata, suspicious tensor names,
anomalous FP32 markers, and deterministic high-entropy-looking
weight bytes to exercise obfuscation heuristics.config.json includes auto_map metadata so scanners can exercise
trust_remote_code review paths.modeling_static_canary.py imports modules commonly flagged by
loader-risk scanners, but import and model construction have no
subprocess, filesystem, or network side effects.