PyCache Trap: The Inspection-Execution Gap in Agent Skill Scanners
The study investigates a security gap where agent skill scanners trust visible source code but Python can load different compiled caches at runtime, leading to cache poisoning. The authors created PyCache Trap to exploit this by swapping benign source with a malicious cache and using Execution-Aware Validation (EAV) to detect the hidden executable body based on its actual bytes, proving that admission must check runtime artifacts.