> For clean Markdown of any page, append .md to the page URL.
> For a complete documentation index, see https://hiddenlayer.ferndocs.com/llms.txt.
> For AI client integration (Claude Code, Cursor, etc.), connect to the MCP server at https://hiddenlayer.ferndocs.com/_mcp/server.

# Supported ML Formats

| Model Format | File Extensions             | Arbitrary Code Execution | Suspicious Functions | Network Requests | Denial of Service | Suspicious File Format | Decompression Vulnerabilities | Embedded Payloads | Directory Traversal | Arbitrary Read Access | Graph Payload |
| ------------ | --------------------------- | :----------------------: | :------------------: | :--------------: | :---------------: | :--------------------: | :---------------------------: | :---------------: | :-----------------: | :-------------------: | :-----------: |
| Cloudpickle  | .pkl, .pickle               |             x            |           x          |         x        |         x         |            x           |                               |                   |                     |                       |               |
| Dill         | .dill                       |             x            |           x          |         x        |         x         |            x           |                               |                   |                     |                       |               |
| GGUF         | .gguf                       |             x            |                      |                  |                   |                        |                               |                   |                     |                       |               |
| HDF5         | .h5, .hdf5                  |             x            |           x          |         x        |         x         |            x           |                               |         x         |                     |                       |               |
| JobLib       | .joblib                     |             x            |           x          |         x        |         x         |            x           |                               |                   |                     |                       |               |
| Keras        | .keras, .tf                 |             x            |                      |                  |                   |                        |               x               |                   |                     |                       |               |
| NeMo         | .nemo                       |             x            |           x          |         x        |         x         |            x           |               x               |                   |                     |                       |               |
| Numpy        | .npy, .npz                  |             x            |           x          |         x        |         x         |            x           |                               |                   |                     |                       |               |
| ONNX         | .onnx                       |                          |                      |                  |                   |                        |                               |                   |          x          |           x           |       x       |
| Pytorch      | .pt, .bin, .zip             |             x            |           x          |         x        |         x         |            x           |                               |                   |                     |                       |               |
| Pickle       | .pkl                        |             x            |           x          |         x        |         x         |            x           |                               |                   |                     |                       |               |
| R            | .rds (plain and compressed) |             x            |                      |                  |                   |                        |                               |                   |                     |                       |               |
| Safetensors  | .safetensors                |                          |                      |                  |                   |                        |               x               |         x         |                     |                       |               |
| Skops        | .skops                      |             x            |                      |                  |                   |                        |                               |                   |                     |                       |               |
| Tensorflow   | .savedmodel, .tf, .pb       |                          |                      |                  |                   |                        |               x               |                   |                     |                       |               |
| Zip          | .zip                        |                          |                      |                  |                   |                        |               x               |                   |                     |                       |               |

## Recognized File Types

Supply Chain recognizes but does not scan the following common file types.

| Category          | File Types                                         |
| ----------------- | -------------------------------------------------- |
| Documentation     | .md (READMEs, release notes)                       |
| Code Files        | .py (scripts), .js (optional), .sh (shell scripts) |
| Config / Metadata | .json, .yaml, .yml, .ini, .cfg                     |
| Data Files        | .txt, .csv, .tsv                                   |
| Git Config Files  | .gitignore, .gitattrib                             |
| TAR               | .tar                                               |

## Unsupported Types

If AI Supply Chain Security does not support, or is unable to recognize, the type of an input file, it will emit a scan result with empty detections and results.type key set to "unknown".

```
[
    {
        "detections": [],
        "end_time": 1717543001759,
        "file_pointer": "/cmd/modelscan-cli/main.go",
        "results": {
            "md5": "33d1ed57c6a93d5cd910fd721c9d016e",
            "sha256": "1739c813f09d2c90ad676d318832134c22864bc1d4bf4f272b9d7971a4cea007",
            "tlsh": "3b360f42d1a3d84e8853d4c5b971a5ce2ae5cf8f87425fa1bd51bc1d4e78a18f20c8be",
            "type": "unknown"
        },
        "scan_id": "1739c813f09d2c90ad676d318832134c22864bc1d4bf4f272b9d7971a4cea007",
        "start_time": 1717543001552,
        "status": "done"
    }
]
```