Showing cs.CRShow all
2 papers · 1 filter
cs.CR2026
MetaCascade: End-to-End Attacks on Agent Skills via Metadata-Only Poisoning
Junhao Wen, Ping Deng, Qizhi Chen +2
As a key extension mechanism for agent systems, Agent Skills package specialized capabilities for reuse by LLM agents. An agent first retrieves candidate skills based on skill docu…
cs.CR2026
PyCache Trap: The Inspection-Execution Gap in Agent Skill Scanners
Jie Liao, Simeng Qin, Wenqi Ren +5
Agent skills combine instructions with executable resources, giving third-party packages access to an agent's runtime. Existing skill scanners inspect documentation and visible sou…