Encrypted Skills Can Become New Security Exploits If AI Agents Know How to Decipher.

arXiv:2610.18262v1 Announce Type: cross Abstract: Third-party skills can expose LLM agents to malicious instructions hidden by encoding. We introduce Ciphered Skill Injection (CSI), which embeds such instructions in skill files for agents to decode and follow.