Ai

9 tutorials in this category.

01 How to Secure AI/ML Model Downloads with Hugging Face Proxying Route Hugging Face model downloads through Chainsaw, apply supply chain policies to ML artifacts, and monitor AI model consumption. Intermediate 20 minutes Security Engineers / ML Engineers 01 How to Use Billy to Investigate Packages and Draft Policies Ask Billy natural language questions about your package consumption, vulnerabilities, and policy gaps, then review and approve Billy's policy proposals. Beginner 15 minutes All Personas 02 How to Scan ML Model Artifacts for Unsafe Pickle Opcodes Stop a malicious model weight from executing arbitrary code at load time. Walks through Chainsaw's pickle opcode scanner, the unsafe opcode list, and how to write a policy that blocks Hugging Face and PyPI artifacts that ship with `os`, `subprocess`, or `builtins.eval` references in their serialized state. Advanced 20 minutes ML Platform Engineers / Security Engineers 02 How to Use Billy MCP Tools for Violation Triage Run inventory queries, simulate patches, and route violations to owners — all from a Billy chat. Walks through the four tool calls Billy can make on your behalf and the approval flow that keeps you in control. Intermediate 20 minutes Security Engineers / DevOps 03 How to Connect Claude / Cursor / GPT to Chainsaw via the Built-in MCP Server Wire your AI agent into the Chainsaw control plane with the Model Context Protocol — give the agent inventory queries, patch-simulation, affected-by lookups, and owner routing without writing a custom integration. Intermediate 20 minutes ML Platform Engineers / Security Engineers / Developers 03 How to Detect Prompt-Injection in Model Cards and Prompt Templates Catch hidden-unicode, bidi-override, and prompt-injection phrasing in Hugging Face model cards, prompt templates, and agent system prompts before they reach your retrieval pipeline. Advanced 20 minutes ML Platform Engineers / Security Engineers / AppSec 04 How to Issue and Rotate AI-Agent Client Credentials Mint a dedicated AI-agent credential, scope it to the right MCP tools and repos, and rotate the secret on a schedule without breaking the agent's session. Beginner 15 minutes Security Engineers / Platform Engineers 04 How to Verify MCP-Server Provenance for Claude / GPT Agent Dependencies An MCP server is a tool you give an LLM. Treat it like one. This guide shows how Chainsaw flags npm and pip packages that ship MCP server descriptors, scores their provenance, and gates which servers can reach your agent runtimes. Advanced 25 minutes ML Platform Engineers / AppSec / DevOps 05 How to Track Agent-Tool Capability Declarations Surface what every agent tool in your supply chain is allowed to do — network, shell, filesystem, eval — and refuse to ship a capability your agent runtime did not ask for. Advanced 20 minutes ML Platform Engineers / Security Engineers