Preprint Open access
PyCache Trap: The Inspection-Execution Gap in Agent Skill Scanners
Agent skills combine instructions with executable resources, giving third-party packages access to an agent's runtime. Existing skill scanners inspect documentation and visible source, but Python may execute a bundled bytecode cache with different behavior. We study this gap between inspection and execution through PyC …