ActionGuard: Tool Call Authorization under Poisoned Skills

Jihun Han, Yejin Jang, Byung Il Kwak +1

LLM-based agents extend their capabilities through third-party skills that provide task-specific instructions, scripts, and tool-use procedures. However, malicious instructions ins…