Ai
9 tutorials in this category.
01
How to Secure AI/ML Model Downloads with Hugging Face Proxying
Route Hugging Face model downloads through Chainsaw, apply supply chain policies to ML artifacts, and monitor AI model consumption.
01
How to Use Billy to Investigate Packages and Draft Policies
Ask Billy natural language questions about your package consumption, vulnerabilities, and policy gaps, then review and approve Billy's policy proposals.
02
How to Scan ML Model Artifacts for Unsafe Pickle Opcodes
Stop a malicious model weight from executing arbitrary code at load time. Walks through Chainsaw's pickle opcode scanner, the unsafe opcode list, and how to write a policy that blocks Hugging Face and PyPI artifacts that ship with `os`, `subprocess`, or `builtins.eval` references in their serialized state.
02
How to Use Billy MCP Tools for Violation Triage
Run inventory queries, simulate patches, and route violations to owners — all from a Billy chat. Walks through the four tool calls Billy can make on your behalf and the approval flow that keeps you in control.
03
How to Connect Claude / Cursor / GPT to Chainsaw via the Built-in MCP Server
Wire your AI agent into the Chainsaw control plane with the Model Context Protocol — give the agent inventory queries, patch-simulation, affected-by lookups, and owner routing without writing a custom integration.
03
How to Detect Prompt-Injection in Model Cards and Prompt Templates
Catch hidden-unicode, bidi-override, and prompt-injection phrasing in Hugging Face model cards, prompt templates, and agent system prompts before they reach your retrieval pipeline.
04
How to Issue and Rotate AI-Agent Client Credentials
Mint a dedicated AI-agent credential, scope it to the right MCP tools and repos, and rotate the secret on a schedule without breaking the agent's session.
04
How to Verify MCP-Server Provenance for Claude / GPT Agent Dependencies
An MCP server is a tool you give an LLM. Treat it like one. This guide shows how Chainsaw flags npm and pip packages that ship MCP server descriptors, scores their provenance, and gates which servers can reach your agent runtimes.
05
How to Track Agent-Tool Capability Declarations
Surface what every agent tool in your supply chain is allowed to do — network, shell, filesystem, eval — and refuse to ship a capability your agent runtime did not ask for.