Minimal TensorFlow/Keras Lambda layer proof of concept for demonstrating why
loading untrusted model artifacts can be dangerous.
The repository creates an HDF5 Keras model containing a Lambda layer that
invokes Python code. It is a small security-research artifact for model supply
chain and unsafe deserialization discussions.
Run this only in an isolated, disposable environment. Do not load unknown Keras, TensorFlow, pickle, or HDF5 artifacts in production systems without treating them as code execution risk.
| File | Purpose |
|---|---|
done.py |
Builds the demonstration model. |
testing.h5 |
Generated Keras HDF5 model artifact. |
test.txt |
Small test fixture. |