Results show that skill-bundled images can induce unauthorized actions even as agents complete legitimate tasks, so task success alone does not establish safe skill use.
Ling-Qi Jiang, Jia-Luo Chen, Jia-Nan Ma et al.· 0 citations
Autonomous AI agents tackling Long Horizon Tasks depend on marketplace skills that are certified one at a time: a scanner returns a safety verdict for each skill and declares the ecosystem safe if every package passes. We show that this assumption fails under skill composition. A skill may pass the per-skill scanner in...
Ming-Xiao Liu, Zhoumian Jiang, Jia-Nan Ma et al.· 0 citations
PoisonedEvolution is introduced, a trajectory-poisoning attack on self-evolving skill systems that exposes evidence promotion as a security boundary for self-evolving agents.
Jia-Luo Chen, Ling-Qi Jiang, Xin-Hao Deng et al.· 1 citation· ⚡1
HazardAuditor is introduced, an execution-grounded framework that runs heterogeneous agents in controlled environments and normalizes their interactions into a canonical event representation for cross-framework supervision, and observes that token-level post-training objectives create a structural mismatch for generati...
Yun-Hao Feng, Rui-Xiao Lin, Ming Wen et al.· 2 citations· ⚡1
SKILLTRACE is presented, a multi-trace provenance auditing framework for LLM-agent skill reuse that represents the Operational Trace as a Skill Operational Graph (SOG) that captures activation, procedure, and resource-flow structure.
Jia-Luo Chen, Minghe Wang, Lingqi Jiang et al.· 0 citations
We use cookies to run the site and, with your consent, for analytics and to show ads.
See our Cookie Policy.