Description
Tencent AI-Infra-Guard's skill-scan component excludes compiled Python bytecode files from analysis by hardcoding __pycache__ directories and .pyc/.pyo/.pyd extensions into skip lists across multiple scanning surfaces. Attackers can distribute skills with benign Python source files alongside malicious compiled bytecode that executes on import while the scanner reports a safe verdict, enabling code execution when operators install the skill.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Tencent AI-Infra-Guard
Default version status: unaffected
0 to < 4.5.2affected4.6.0 to ≤ 4.6.0affected
pkg:github/Tencent/AI-Infra-GuardTencent aig-skill-scan
Default version status: unaffected
0 to ≤ 0.2.1affected
pkg:pypi/aig-skill-scanReferences
- https://github.com/Tencent/AI-Infra-Guard/issues/531 ↗
- https://github.com/Tencent/AI-Infra-Guard/commit/7e0f749e3c023e5c6ab7b32fe97b3f6f2e8aeb04 ↗
- https://github.com/Tencent/AI-Infra-Guard/blob/v4.6.0/skill-scan/skill_scan/tools/dir/dir_actions.py ↗
- https://github.com/Tencent/AI-Infra-Guard/blob/v4.6.0/skill-scan/skill_scan/utils/pre_scan.py ↗
- https://github.com/Tencent/AI-Infra-Guard ↗
- https://www.vulncheck.com/advisories/tencent-ai-infra-guard-skill-scan-analysis-bypass-via-excluded-python-bytecode ↗