"Do Not Mention This to the User": Detecting and Understanding Malicious Agent Skills in the Wild

Yi Liu, Zhihao Chen, Yanjun Zhang +4

LLM-based coding agents increasingly rely on third-party extensions called skills, which bundle natural language instructions and helper scripts that execute with full user privile…