PhantomSkill: Malicious Code Injection in Agent Skill Ecosystems

Yu-Ting Lin, Chia-Mu Yu

Agent skills allow LLM-based coding agents to acquire domain-specific capabilities from third-party packages, but they also introduce a new supply-chain attack surface. We present…