Wave-6
4 tutorials in this category.
02
How to Scan ML Model Artifacts for Unsafe Pickle Opcodes
Stop a malicious model weight from executing arbitrary code at load time. Walks through Chainsaw's pickle opcode scanner, the unsafe opcode list, and how to write a policy that blocks Hugging Face and PyPI artifacts that ship with `os`, `subprocess`, or `builtins.eval` references in their serialized state.
03
How to Detect Prompt-Injection in Model Cards and Prompt Templates
Catch hidden-unicode, bidi-override, and prompt-injection phrasing in Hugging Face model cards, prompt templates, and agent system prompts before they reach your retrieval pipeline.
04
How to Verify MCP-Server Provenance for Claude / GPT Agent Dependencies
An MCP server is a tool you give an LLM. Treat it like one. This guide shows how Chainsaw flags npm and pip packages that ship MCP server descriptors, scores their provenance, and gates which servers can reach your agent runtimes.
05
How to Track Agent-Tool Capability Declarations
Surface what every agent tool in your supply chain is allowed to do — network, shell, filesystem, eval — and refuse to ship a capability your agent runtime did not ask for.