{"categories":[{"label":"Security","url":"https://skillfed.io/packages/category/security/3"}],"enrichment":{"capability":"Scans Python Pickle files and related serialized model formats to detect suspicious or malicious code execution patterns before loading them.","skillfed_tags":["malware-detection","machine-learning-security","cli-tool"],"use_cases":["Verify downloaded PyTorch or other ML models from Hugging Face before loading them in your training pipeline.","Scan model directories in CI/CD to block commits or deployments of pickles with detected dangerous operations.","Audit local pickle files or model repositories for suspicious code patterns before sharing or using them.","Integrate into model download workflows to automatically check remote URLs for malicious payloads.","Screen .npy numpy files alongside pickles when auditing scientific data or model checkpoints."],"what_it_does":"Picklescan is a command-line security tool that inspects Python Pickle files and related serialized formats (like PyTorch models) to identify dangerous operations before you load them. Pickle's design allows arbitrary code execution during deserialization, making untrusted pickles a significant security risk in machine learning workflows. The scanner reports specific dangerous globals and operations it finds, using exit codes compatible with security scanning tools like ClamAV.\n\nIt works with local files, directories, remote URLs, and zip archives (common in PyTorch model distribution). You can filter scans by file patterns and directory traversal rules. The tool has no runtime dependencies and runs as a standalone CLI, making it easy to integrate into CI/CD pipelines or pre-download security checks for models from sources like Hugging Face.","worth_installing":"Yes. If you work with untrusted or community-sourced pickle files\u2014especially ML models\u2014this tool fills a real security gap with zero installation friction and active maintenance. No dependencies, straightforward CLI, and clear exit codes make it suitable for both manual inspection and automation. Install it."},"id":"picklescan","links":{"html":"https://skillfed.io/packages/picklescan","md":"https://skillfed.io/packages/picklescan.md","pypi":"https://pypi.org/project/picklescan/"},"maintenance":{"status":"active"},"meta":{"latest_release":"2026-07-01","license_spdx":null,"license_treatment":"permissive","name":"picklescan","python_support":"supports_current","summary":"Security scanner detecting Python Pickle files performing suspicious actions"},"popularity":{"monthly_downloads":91871,"position":13497,"tier":"top_15000"},"security":{"n_vulnerabilities":0},"version":"1.0.5"}