CoRedSkill: Stealthy Skill Composition Attacks via AST-Guided Injection

Key points

• Agents extend their capabilities through reusable skills that package instructions, executable code, and resources.1
• Composing these skills enables complex task workflows, but their dependencies can also connect malicious operations across skills, making their combined intent difficult to identify through individual-package auditing.1
• CoRedSkill decomposes an existing workflow into interdependent skills and embeds attack operations in task functions through abstract syntax tree (AST) rewriting, with skill instructions guiding the agent to autonomously select and invoke the relevant skills, and workflow dependencies and intermediate artifacts connecting the injected operations during task execution.1
• We construct a benchmark of 150 cases covering 50 tasks and three attack objectives to evaluate attack success, task completion, and audit detection.1

Sources (1)

• [1]CoRedSkill: Stealthy Skill Composition Attacks via AST-Guided Injection
  arXiv (AI, ML, NLP, CV, robotics, multi-agent) · Oct 14, 11:52 AM

  We introduce CoRedSkill, a compositional red-teaming method that forms stealthy attacks through cooperating skills while preserving their original utility.

  Agents extend their capabilities through reusable skills that package instructions, executable code, and resources.

Extractive summary: sentences quoted from the sources.