Hugging Face Hub — Pickle Scanning documentation

Verified: HuggingFace documentation confirms that pickle is the default format for PyTorch model weights and that 'there are dangerous arbitrary code execution attacks that can be perpetrated when you load a pickle file.' The Hub runs a Pickle Import scan using pickletools.genops to extract imports without executing code. The docs recommend safetensors as a safe alternative. The fickling library (trailofbits) is referenced as a tool for analyzing malicious pickles.