Skip to content

Translation in progress Some entries still include text in the original language.

Oct 12 · Monday

All papers

Found 5 papers
Filter3

Attack type

Prompt injection3Poisoning and backdoors4

Attack technique

Defense-targeted3

Impact

Unauthorized actions3

System type

AI Agent5

Attack surface / entry point

User input27Web pages and interfaces7Documents and messages10Tool responses10Tool and skill descriptions10Code repositories and dependencies4Retrieval corpus4Memory writes3Inter-agent messages3Images, audio and video6Distribution channels5

Layer

Application layer5

System component

MCP and skills37Memory3Guardrails and judges5Monitors4Permissions and sandboxing7Fine-tuning and open weights3
Select any value within a category; different categories must all match. Counts include the other filters you have selected.Another 232papers have no tags yet and are not included in filtered results.
Attack surface / entry point：Distribution channelsLayer：Application layerSystem component：Guardrails and judgesClear all

Another 232papers do not have category tags yet and are not included in filtered results.

  1. AttacksarXiv 2610.10612

    PyCache Trap 利用 Python 缓存替换绕过七款 Agent Skill 扫描器

    提出 PyCache Trap，用字节码缓存替换绕过 Agent 技能扫描器

    arXiv
    2610.10612
    Published
    Layer
    Application layer
    Setting
    coding agent
    Evaluated models
    CISCO, HSS, AUDITOR and others8
    Abstract论文剖析智能体技能审查与执行脱节盲区，提出 PyCache Trap 攻击并构建基于可信复现的 EAV 防御。

    这篇论文研究了智能体技能（Agent Skills）安全扫描中的“审查–执行脱节”问题，并提出了对应的攻击验证与防御方案。

    Paper analysisRead analysis
  2. AttacksarXiv 2609.39607

    Pretext 攻击绕过 NVIDIA SkillSpector 等 Agent 技能扫描器

    提出 PRETEXT 攻击，迭代改写技能文本绕过技能扫描器并让 Agent 执行木马

    arXiv
    2609.39607
    Published
    Layer
    Application layer
    Setting
    AI Agent
    Attacker
    White-box
    Evaluated models
    glm (z-ai/glm-5.1), qwen3t (qwen/qwen3-235b-a22b-thinking-2507), gpt-oss (openai/gpt-oss-120b)
    Abstract论文提出了针对多阶段技能检测器的白盒攻击，揭示了单纯依赖大模型自适应检测的局限。

    PRETEXT 是一项针对基于“静态规则加语义大模型”的智能体技能安全检测框架的白盒攻击与协同进化评估研究。

    Paper analysisRead analysis
  3. AttacksarXiv 2609.30383

    研究者提出技能级联攻击

    提出技能级联攻击，把有害目标拆散到多个技能里绕过单技能扫描

    arXiv
    2609.30383
    Published
    Layer
    Application layer
    Setting
    AI Agent
    Evaluated models
    GPT-5.4, GPT-5.4 Mini, Claude Opus 4.6 and others11

    Abstract论文探讨了多技能智能体系统面临的技能级联攻击风险，提出自动化红队框架与基准集，指出跨技能交互存在安全防护盲区。

    Paper analysisRead analysis
  5. Evaluation and benchmarksarXiv 2606.15899

    SkillVetBench：用 LLM-as-Judge 评估开源 LLM Agent 技能的多维安全风险

    提出 SkillVetBench 评估开源 Agent 技能的多维安全风险

    arXiv
    2606.15899
    Published
    Layer
    Application layer
    Setting
    AI Agent
    Evaluated models
    Qwen2.5-14B-Instruct, Qwen2.5-32B, Llama-3.1-70B and others6

    Abstract公开排行榜用 LLM-as-Judge 给技能分列 SARS 与 CVSS，并对照市场官方审查。

    Paper analysisRead analysis
You have reached the end