Hiding in Plain Sight: Decoupling Pretext from Actuation for Skill Poisoning in LLM Agents.

arXiv:2609.39352v1 Announce Type: cross Abstract: LLM agents increasingly rely on reusable Skills for complex, multi-step tasks, creating a critical supply-chain attack surface where poisoned Skill content steers agent decision loops under benign requests. Exi