One Skill, Two Masters: Serving Users and Attackers through Skill Injection.

arXiv:2606.07943v3 Announce Type: replace-cross Abstract: Large language model agents use skills that package reusable instructions, code, and resources. Existing skill-injection attacks exploit trust in these packages by adding malicious content. As agents be