"Do Not Mention This to the User": Detecting and Understanding Malicious Agent Skills in the Wild

arXiv:2602.06547v4 Announce Type: replace-cross Abstract: LLM-based coding agents increasingly rely on third-party extensions called skills, which bundle natural language instructions and helper scripts that execute with full user privileges. Community registries have emerged to distribute these skills, but the security implications remain...

Read the full article at the source.