Add Keras ModelScan coverage validation artifacts

HUNTR_FORM.md

@@ -0,0 +1,40 @@
+# Huntr Form Copy
+
+## Target
+
+Keras Native (`.keras`)
+
+## Title
+
+ModelScan Keras V3 scanner misses `TorchModuleWrapper` unsafe deserialization surface in `.keras` files
+
+## Hugging Face PoC
+
+TBD after uploading this directory to a public Hugging Face repository.
+
+Recommended repo name:
+
+```text
+keras-modelscan-torchmodulewrapper-coverage-gap
+```
+
+## Description
+
+Use the full local draft:
+
+```text
+01-mfv-model-file-vulnerabilities/report-drafts/F-MFV-001-modelscan-torchmodulewrapper-gap.md
+```
+
+## Short Impact Statement
+
+ModelScan 0.8.8 returns a clean scan for a Keras V3 `.keras` file containing `TorchModuleWrapper`, while Keras 3.14.0 blocks the same class in `safe_mode=True` because it can deserialize a `torch.nn.Module` through `torch.load()`. The same ModelScan setup correctly flags a benign Lambda positive control, so this is a targeted scanner coverage gap rather than a broken scanner installation.
+
+## Upload Checklist
+
+- [ ] Upload all files in this directory to a public Hugging Face repo.
+- [ ] Confirm Hugging Face SHA256 matches `SHA256SUMS.txt`.
+- [ ] Paste repo URL into the Huntr form.
+- [ ] Submit as scanner coverage gap / scanner bypass.
+- [ ] Do not present as a new Keras runtime RCE.
+

README.md

@@ -0,0 +1,30 @@
+# Keras ModelScan Coverage Validation Artifacts
+
+This repository contains benign Keras V3 `.keras` files for validating scanner behavior.
+
+## Files
+
+- `benign_torch_module.keras`: benign Keras model containing `TorchModuleWrapper`.
+- `benign_lambda.keras`: benign Keras model containing a `Lambda` layer as a positive scanner control.
+- `modelscan-benign_torch_module.json`: ModelScan 0.8.8 JSON output for `benign_torch_module.keras`.
+- `modelscan-benign_lambda.json`: ModelScan 0.8.8 JSON output for `benign_lambda.keras`.
+- `detector-summary.md`: local static detector comparison summary.
+
+## Reproduce
+
+```sh
+python3 -m venv .venv
+.venv/bin/python -m pip install 'keras==3.14.0' torch h5py
+.venv/bin/python -m pip install 'modelscan==0.8.8' 'modelscan[tensorflow]==0.8.8'
+
+.venv/bin/modelscan scan -p benign_lambda.keras -r json
+.venv/bin/modelscan scan -p benign_torch_module.keras -r json
+```
+
+Expected result:
+
+- `benign_lambda.keras`: ModelScan reports one Medium Lambda issue.
+- `benign_torch_module.keras`: ModelScan reports zero issues.
+
+The files are benign and are provided only for scanner validation.
+

SHA256SUMS.txt

@@ -0,0 +1,6 @@
+2de4c52412aa2049436cbafddee0f0c5db049369078b83d81748a8f0a184c819  README.md
+67d5c8c63d4210270104c97914d3d1b9642998382ea272e685d5ba1aeda9c978  benign_lambda.keras
+efe7c5974401e3615f483797fbd276c4bb76d921949ef35655e574cd1ae0c5e1  benign_torch_module.keras
+263c2b2916319b0ac32787618e758b22e1a5ece794be44e7b4c6b09f27822d91  detector-summary.md
+c5c044397e76b3abdbbb5fbb87a1f5ce026e4825481f756c33f676b8c6ffc019  modelscan-benign_lambda.json
+847d96c91184907462427a5fdd93ed5802729fbcd0c60cd384ffa2a19039f364  modelscan-benign_torch_module.json

detector-summary.md

@@ -0,0 +1,21 @@
+# EXP-MFV-20260502-002 Summary
+
+| File | Detector findings | ModelScan issues | Gap |
+| --- | ---: | ---: | --- |
+| `benign_dense.keras` | `0` | `0` | `no` |
+| `benign_external_vocab_lookup.keras` | `0` | `0` | `no` |
+| `benign_functional.keras` | `0` | `0` | `no` |
+| `benign_lambda.keras` | `2` | `1` | `no` |
+| `benign_registered_custom.keras` | `0` | `0` | `no` |
+| `benign_torch_module.keras` | `1` | `0` | `yes` |
+
+## Detector Findings
+
+### `benign_lambda.keras`
+
+- `unsafe_class` at `$.config.layers[1]`: Lambda layer may deserialize Python functions/lambdas.
+- `serialized_lambda` at `$.config.layers[1].config.function`: Serialized Python lambda object.
+
+### `benign_torch_module.keras`
+
+- `unsafe_class` at `$.config.layers[1]`: TorchModuleWrapper may deserialize torch.nn.Module via torch.load().

modelscan-benign_lambda.json

@@ -0,0 +1 @@
+{"summary": {"total_issues_by_severity": {"LOW": 0, "MEDIUM": 1, "HIGH": 0, "CRITICAL": 0}, "total_issues": 1, "input_path": "01-mfv-model-file-vulnerabilities/evidence/EXP-MFV-20260502-001/models/benign_lambda.keras", "absolute_path": "/Users/fsabiu/Documents/Bounty/01-mfv-model-file-vulnerabilities/evidence/EXP-MFV-20260502-001/models", "modelscan_version": "0.8.8", "timestamp": "2026-05-02T11:00:30.051183", "scanned": {"total_scanned": 1, "scanned_files": ["benign_lambda.keras"]}, "skipped": {"total_skipped": 3, "skipped_files": [{"category": "SCAN_NOT_SUPPORTED", "description": "Model Scan did not scan file", "source": "benign_lambda.keras:metadata.json"}, {"category": "SCAN_NOT_SUPPORTED", "description": "Model Scan did not scan file", "source": "benign_lambda.keras:config.json"}, {"category": "MODEL_CONFIG", "description": "Model Config not found", "source": "benign_lambda.keras:model.weights.h5"}]}}, "issues": [{"description": "Use of unsafe operator 'Lambda' from module 'Keras'", "operator": "Lambda", "module": "Keras", "source": "benign_lambda.keras:config.json", "scanner": "modelscan.scanners.KerasLambdaDetectScan", "severity": "MEDIUM"}], "errors": []}

modelscan-benign_torch_module.json

@@ -0,0 +1 @@
+{"summary": {"total_issues_by_severity": {"LOW": 0, "MEDIUM": 0, "HIGH": 0, "CRITICAL": 0}, "total_issues": 0, "input_path": "01-mfv-model-file-vulnerabilities/evidence/EXP-MFV-20260502-001/models/benign_torch_module.keras", "absolute_path": "/Users/fsabiu/Documents/Bounty/01-mfv-model-file-vulnerabilities/evidence/EXP-MFV-20260502-001/models", "modelscan_version": "0.8.8", "timestamp": "2026-05-02T11:00:34.901055", "scanned": {"total_scanned": 1, "scanned_files": ["benign_torch_module.keras"]}, "skipped": {"total_skipped": 3, "skipped_files": [{"category": "SCAN_NOT_SUPPORTED", "description": "Model Scan did not scan file", "source": "benign_torch_module.keras:metadata.json"}, {"category": "SCAN_NOT_SUPPORTED", "description": "Model Scan did not scan file", "source": "benign_torch_module.keras:config.json"}, {"category": "MODEL_CONFIG", "description": "Model Config not found", "source": "benign_torch_module.keras:model.weights.h5"}]}}, "issues": [], "errors": []}