Skip to content

Add "AI Security Tools" section and Veritensor#39

Open
arsbr wants to merge 2 commits into
huggingface:mainfrom
arsbr:main
Open

Add "AI Security Tools" section and Veritensor#39
arsbr wants to merge 2 commits into
huggingface:mainfrom
arsbr:main

Conversation

@arsbr

@arsbr arsbr commented Feb 2, 2026

Copy link
Copy Markdown

Hi team!

As the Hugging Face ecosystem grows, Supply Chain Security is becoming a critical part of the MLOps workflow. I would like to propose adding a new section: "AI Security Tools" (or similar), and submitting Veritensor as an entry.

Veritensor is an open-source CLI specifically designed to secure the consumption of Hugging Face models and datasets.

Why it fits:

  • Identity Verification: It calculates local file hashes and queries the HF API to ensure the downloaded file matches the official upstream version bit-for-bit (detecting MITM or corruption).
  • LFS Validation: Automatically detects broken Git LFS pointers (a common issue when downloading models).
  • Malware & Poisoning Detection: Performs static analysis on Pickle/PyTorch models and streams Parquet datasets downloaded from the Hub to detect RCE and malicious URLs.

Repo: https://github.com/arsbr/Veritensor
License: Apache 2.0

Proposed entry for the README.md:

  • Veritensor - Security scanner for Hugging Face artifacts. Verifies model hash integrity against the Hub API and detects malware in Pickle/PyTorch files and Parquet datasets.

If you prefer not to create a new section, please feel free to merge this under "Utilities" or "Tools". Thanks for maintaining this awesome list!

@arsbr

arsbr commented Mar 28, 2026

Copy link
Copy Markdown
Author

Hi @Josephrp ! I just want to kindly remind you about adding Veritensor to the awesome HF list. Veritensor has already been added to the awesome LangChain list under Services tools, so it went through checks and showed its reliability. If there is anything I can do to speed up the process, let me know.
Best
Arsenii

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant