From soundcheck
Checks for LLM supply chain vulnerabilities including unverified model downloads, floating version tags, unapproved providers, and unchecked automated updates. Flags risks and suggests pinned SHAs, checksums, org allowlists, and human approval.
npx claudepluginhub thejefflarson/soundcheck --plugin soundcheckThis skill uses the workspace's default tool permissions.
Protects against compromised or backdoored models introduced through unverified
Detects AI/ML security vulnerabilities like unsafe model deserialization in PyTorch/Joblib/NumPy, prompt injection in LLM prompts, and risks in Jupyter notebooks or ML pipelines.
Audits AI-generated code and LLM applications for security vulnerabilities, covering OWASP Top 10 for LLMs, secure coding patterns, and AI-specific threat models.
Audits LLM and GenAI applications for OWASP Top 10 2025 vulnerabilities including prompt injection, data leakage, supply chain risks, and more. Use before deployment, for RAG reviews, or pen testing.
Share bugs, ideas, or general feedback.
Protects against compromised or backdoored models introduced through unverified
downloads, floating version tags, or unreviewed third-party providers. A tampered
model weight file or a silently swapped latest tag can introduce persistent
backdoors that survive retraining.
model = load("https://arbitrary-host.com/model.bin") — no checksum verificationmodel_id = "org/model:latest" — floating tag silently pulls a different artifact on each runFlag the vulnerable code and explain the risk. Then suggest a fix that establishes these properties:
main, latest,
or a mutable branch name. A floating tag lets the registry (or a registry
compromise) silently swap what you load on the next pull — including backdoored
weights that look identical by name.org/model notation with a wildcard org field is
the supply-chain equivalent of *.Anchor — shape, not implementation:
require(model_id.split("/")[0] in APPROVED_ORGS)
model = load(model_id, revision=PINNED_COMMIT_SHA) # not "main"
require(sha256(weight_file) == PINNED_SHA256) # pinned in source
Confirm the response:
"main" or "latest"