This model has one file that has been marked as unsafe.
View unsafe files pytorch_model-00002-of-00002.bin
What is a pickle import?
How to fix it?