187  modelscan(1) - Kailash Tool Reference

187.1 modelscan

modelscan - Protect AI modelscan — serialized-model scanner covering pickle, torch, keras and other ML artefact formats.

Layer ATTACK
Category a-04-model-supply-chain
Safety class safe
Licence Apache-2.0
Upstream github.com/protectai/modelscan

187.1.1 NAME

modelscan - Protect AI modelscan — serialized-model scanner covering pickle, torch, keras and other ML artefact formats.

187.1.2 SYNOPSIS & usage

Derived from the upstream README at generation time; verify against --help where the tool is installed.

pip install modelscan
modelscan -p /path/to/model_file.pkl

187.1.3 DESCRIPTION (upstream)

Machine Learning (ML) models are shared publicly over the internet, within teams and across teams. The rise of Foundation Models have resulted in public ML models being increasingly consumed for further training/fine tuning. ML Models are increasingly used to make critical decisions and power mission-critical applications. Despite this, models are not yet scanned with the rigor of a PDF file in your inbox. This needs to change, and proper tooling is the first step. ModelScan is an open source project from Protect AI that scans models to determine if they contain unsaf

187.1.4 CONFIGURATION (detected)

Config-surface markers detected in the upstream README (10 matches, e.g. bandit.yml, bandit.yml). A full config reference page for this tool is queued under the config-page policy — this line is the detection record, not the page.

187.1.5 SEE ALSO

ref: pin - verified 2026-10-14