Skip to content

Add "AI Security Tools" section and Veritensor#39

Open
arsbr wants to merge 2 commits intohuggingface:mainfrom
arsbr:main
Open

Add "AI Security Tools" section and Veritensor#39
arsbr wants to merge 2 commits intohuggingface:mainfrom
arsbr:main

Conversation

@arsbr
Copy link

@arsbr arsbr commented Feb 2, 2026

Hi team!

As the Hugging Face ecosystem grows, Supply Chain Security is becoming a critical part of the MLOps workflow. I would like to propose adding a new section: "AI Security Tools" (or similar), and submitting Veritensor as an entry.

Veritensor is an open-source CLI specifically designed to secure the consumption of Hugging Face models and datasets.

Why it fits:

  • Identity Verification: It calculates local file hashes and queries the HF API to ensure the downloaded file matches the official upstream version bit-for-bit (detecting MITM or corruption).
  • LFS Validation: Automatically detects broken Git LFS pointers (a common issue when downloading models).
  • Malware & Poisoning Detection: Performs static analysis on Pickle/PyTorch models and streams Parquet datasets downloaded from the Hub to detect RCE and malicious URLs.

Repo: https://github.com/arsbr/Veritensor
License: Apache 2.0

Proposed entry for the README.md:

  • Veritensor - Security scanner for Hugging Face artifacts. Verifies model hash integrity against the Hub API and detects malware in Pickle/PyTorch files and Parquet datasets.

If you prefer not to create a new section, please feel free to merge this under "Utilities" or "Tools". Thanks for maintaining this awesome list!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant