AIsbom – open-source CLI to detect "Pickle Bombs" in PyTorch models

AIsbom is a specialized security scanner for machine learning artifacts that performs deep binary introspection on model files like .pt, .pkl, and .safetensors. Unlike generic SBOM tools that only check requirements.txt, AIsbom detects malware risks and license violations hidden inside serialized model weights by disassembling pickle bytecode and extracting metadata without loading heavy weights into memory.