Poise: Position-Aware One-Instruction Skill Injection for Silent Execution on LLM Agents

Haochang Hao, Dehai Min, Zhifang Zhang +4

Agent skills extend general-purpose agents, but their open format enables skill poisoning: a tampered skill can make an agent run an attacker's command while completing the user's…