README.md

ModelScan TensorFlow RecordInput bypass PoC

This repository contains a TensorFlow SavedModel scanner bypass PoC for RecordInput, plus a ReadFile control model.

Scan summary:

• control_savedmodel_readfile: total_issues=1 severity={'LOW': 0, 'MEDIUM': 0, 'HIGH': 1, 'CRITICAL': 0}
• bypass_savedmodel_recordinput: total_issues=0 severity={'LOW': 0, 'MEDIUM': 0, 'HIGH': 0, 'CRITICAL': 0}