Which open-source model-file scanner catches what? A vendor-neutral, fully-cited coverage matrix

Automated excerpt

So I built a vendor-neutral, fully-cited coverage matrix: 16 model-file attack vectors × 5 open-source scanners, every cell traceable to a tool's own docs, source, or the relevant advisory. Stealthy/evasive pickle (the ShadowPickle technique, arXiv 2607. 17503) — the two most widely-deployed scanners drop to zero recall, with only one tool offering partial coverage. A smaller gap worth noting: SafeTensors header/metadata abuse has no full coverage anywhere either — only partial handling from two tools.

Selected automatically from source text; not independently written or fact-checked. Read the original for full context.