One Skill, Two Masters: Serving Users and Attackers through Skill Injection

Haochang Hao, Dehai Min, Zhifang Zhang +5

Large language model agents use skills that package reusable instructions, code, and resources. Existing skill-injection attacks exploit trust in these packages by adding malicious…