{"name":"io.github.4hmetuyar/model-scanner","slug":"4hmetuyar-model-scanner","title":null,"description":"Scans ML model files (PyTorch, safetensors, Keras, ONNX) for supply-chain risks","url":"https://mcp.market/server/4hmetuyar-model-scanner","rating":null,"grade":"B","score":78,"certified":false,"status":"active","category":"ai","tags":["ai"],"presence":{"score":31,"stars":1,"forks":0,"downloads_week":522,"last_push_at":"2026-10-01T07:02:43.000Z","license":"MIT"},"uptime":null,"claimed":false,"transport":"npm","callable_via_gateway":false,"default_price_micros":0,"repository":"https://github.com/GuardBee/guardbee-mcp","website":null,"version":"0.1.2","remotes":[],"packages":[{"registryType":"npm","identifier":"@guardbee/mcp-model-scanner","version":"0.1.2","transport":{"type":"stdio"}}],"tools":[{"name":"list_patterns","description":"List every dangerous Python global (module.function) this scanner treats as a red flag when found referenced inside a pickled model file, grouped by risk category","write_action":false,"price_micros":0,"input_schema":null},{"name":"scan_directory","description":"Recursively scan a directory for ML model files (.pt, .pth, .ckpt, .pkl, .pickle, .bin, .safetensors, .h5, .hdf5, .keras, .onnx) and report supply-chain risks in each. Automatically skips node_modules, .git, venv, and other non-model directories.","write_action":false,"price_micros":0,"input_schema":null},{"name":"scan_file","description":"Scan a single ML model file for supply-chain risks: dangerous Python globals reachable during pickle deserialization (os/subprocess/eval/socket/etc, including inside PyTorch's zip checkpoint container), a malformed or disguised .safetensors header, a Keras Lambda-layer RCE pattern in .h5/.keras files, or a path-traversal external_data reference in .onnx files.","write_action":false,"price_micros":0,"input_schema":null}],"scan":{"score":78,"grade":"B","scanned_at":"2026-10-01T13:50:23.573Z","report":{"scannerVersion":"0.1.10","scannedAt":"2026-10-01T13:50:23.538Z","components":{"code":{"score":20,"max":25,"notes":["25 source files scanned"]},"reliability":{"score":-1,"max":20,"notes":["no gateway calls yet and no remote to probe"]},"poisoning":{"score":-1,"max":15,"notes":["tools not inspected (local package is not executed); not counted"]},"auth":{"score":12,"max":15,"notes":["local package, no credentials required"]},"maintenance":{"score":15,"max":15,"notes":["last push 0 days ago"]},"identity":{"score":4,"max":10,"notes":["namespace and repository owner differ"]}},"findings":[{"id":"exec.eval","severity":"medium","component":"code","title":"eval / new Function used","evidence":"dist/safetensorsScanner.js: …am code path (e.g. a custom loader that eval()s a metadata field), this content is wo…"}],"inputs":{"packages":[{"registryType":"npm","identifier":"@guardbee/mcp-model-scanner","version":"0.1.2","found":true,"license":"MIT","hasInstallScripts":false,"dependencyCount":3,"publishedAt":"2026-09-28T19:11:43.716Z","repositoryUrl":"git+https://github.com/GuardBee/guardbee-mcp.git","weeklyDownloads":522}],"repo":{"found":true,"owner":"GuardBee","repo":"guardbee-mcp","archived":false,"pushedAt":"2026-10-01T07:02:43Z","stars":1,"forks":0,"openIssues":0,"ownerType":"Organization","ownerAvatarUrl":"https://avatars.githubusercontent.com/u/296794741?v=4","ownerCreatedAt":"2026-06-25T07:13:41Z"},"icon":{"url":"https://avatars.githubusercontent.com/u/296794741?v=4&s=128","source":"github"},"presence":{"stars":1,"forks":0,"downloadsWeek":522,"license":"MIT","lastPushAt":"2026-10-01T07:02:43.000Z","score":31}}}},"grade_history":[],"reviews":[]}