Byterover 2.0.0

• Analyzed: May 11, 2026, 6:48 AM
• Findings: 1
• Version: 1.0.0
• Hash: 1bc07afda8bf5f819fb0b0394ef423fb97f69de26b776fab29d00f85831d57af
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill mandates the use of an external CLI tool (`byterover-cli`) and a third-party service for all agent operations, creating a significant risk of data exfiltration. It employs aggressive prompt injection techniques in `SKILL.md` ("You MUST use this... before any work") to ensure project context and files are routed through the 'ByteRover' LLM provider, which is configured by default to operate without an API key. While it claims data is only stored locally unless 'pushed', the requirement to send context to an external provider for every 'query' and 'curate' operation allows for silent data harvesting of project-sensitive information.