SkillBloat: Token Amplification Attacks via Skill Injection in LLM Coding Agents

Yuanjin Zheng, Jingbang Chen

Agent skills extend coding agents with task-specific instructions, scripts, and resources, but they also create a trusted instruction channel that can be abused beyond conventional…