Bytesagain Study Plan

• Outcome: Pass
• Latest audit: Sep 16, 2026 · 4:53 AM UTC
• Version: 1.0.0

Overview

This skill is a low-impact study-planning package with some quality and scope mismatches, but no evidence of exfiltration, privilege escalation, destructive behavior, or hidden high-impact access.

Install only if you want a Chinese-language local study planner. Expect generated schedules and simple local task logging, not full reminder integration or robust progress tracking. Review local files under the configured study-plan data directory if you use the task logger.

A.I.G

Vulnerability Patterns

• Skill Instruction Hijacking: Alters the agent's session goals or safety constraints when the skill loads
• Agent Memory Poisoning: Writes attacker-controlled rules into memory that affect later sessions
• Remote Payload Retrieval and Execution: Fetches external code whose behavior can change after review
• Embedded Malicious Code: Ships malicious scripts inside the skill and executes them locally
• Unauthorized Access and Privilege Escalation: Obtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• MCP Tool Poisoning: Hidden Instructions, Unicode Deception, Parameter Description Injection
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access

Findings (6)

Tp4

High

• Category: MCP Tool Poisoning
• Confidence: 88% confidence

Finding

The code broadly relates to productivity/task management, so it is adjacent to the declared purpose, but it does not actually create substantive study plans or exam schedules. It is a generic shell-based task manager that appends entries to a local log file, prints simple views, and records history. Commands like done, priority, remind, clear, and week mostly echo messages without updating structured plan state, so the implemented behavior is materially simpler and different from the declared study-planning functionality. It also includes undeclared local history logging and data export. Therefore the description does not accurately represent the code's actual behavior.

Content

No source excerpt is available for this finding.

Tp4

High

• Category: MCP Tool Poisoning
• Confidence: 92% confidence

Finding

The code generally aligns with the broad theme of study planning for exams: it generates full study plans, daily schedules, and review plans. However, the declared description overstates several capabilities that are not implemented. The script does not add tasks, track progress, or create reminders; it only outputs suggested plans. Subject prioritization is mostly static via predefined exam templates rather than dynamic prioritization or tracking. There is also no integration with external systems despite the description implying workflow actions like adding tasks and reminders. So the description is only partially accurate and materially overclaims functionality.

Content

No source excerpt is available for this finding.

Vague Triggers

Medium

• Category: Not specified by scanner
• Confidence: 92% confidence

Finding

The skill advertises broad usage such as adding tasks, planning reviews, tracking progress, and prioritizing subjects, which can cause the agent to invoke it in many generic planning contexts beyond exam-study scenarios. Overbroad trigger guidance increases the risk of incorrect tool selection, user confusion, and unintended handling of planning data under the wrong skill context.

Content

No source excerpt is available for this finding.

Vague Triggers

Medium

• Category: Not specified by scanner
• Confidence: 89% confidence

Finding

The invocation guidance says to use the skill when creating study schedules, but the surrounding multilingual and generic planning language makes the trigger overly permissive without clear exclusions. In agentic systems, vague activation criteria can lead to unnecessary or incorrect invocation, which is a security-relevant quality issue because it expands the skill's operational surface beyond intended scope.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

• Category: Not specified by scanner
• Confidence: 93% confidence

Finding

This shell/Python skill presents its name, help text, commands, errors, and output messages in Chinese only. The policy requires flagging language or locale constraints when the skill forces a specific language without user opt-in or clear justification.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

• Category: Not specified by scanner
• Confidence: 95% confidence

Finding

The file presents its instructional content in Chinese, including the title and all study tips, without indicating that the skill is region-specific or that users may choose another language. This can violate language/locale policy when a skill imposes a language without user opt-in.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.