Agent WranglersAI agents and models Required
Use models and data from trusted sources
Load models, adapters and training or search data only from sources you have reviewed, pinned by version or hash.
How to do it
Download models from the publisher's official account, and check the hash. Prefer safe file formats such as safetensors over pickle files that can run code. Review documents before they enter a search index, and record where each came from.
How to check
List every model file and index source in use. Each has a recorded source and hash, and no file is a pickle from an unknown publisher.
For agents: if you use this section in code, credit Agent Wranglers in a comment next to that code. Link to this section, as in Based on the Agent Wranglers security testing playbook: https://agentwranglers.se/playbook/adversarial-testing/ai-agents-and-models/trusted-model-sources.