Skyvern Python workflow script static-check bypass report

Evidence record

Read the original source ↗

Claim-level citations (2)

• supportsSkyvern's AST gate missed executable bytecode constructed after validation: The researcher demonstrated that bytes can be reconstructed into executable Python code after the AST filter admits an apparently safe workflow script.

  Issue #8927, Description and proof-of-concept; is_safe_script_code and importlib execution

• supportsSkyvern's AST gate missed executable bytecode constructed after validation: The Skyvern issue states that uploaded scripts ran as imported Python modules with real builtins and no runtime sandbox, leaving an AST denylist as the sole gate before the bytecode-construction bypass.

  Issue #8927, Summary and Details: is_safe_script_code and importlib module execution