Cover Image

Context Matters: Repository-Aware Security Analysis of the Agent Skill Ecosystem

Fuente: arXiv

Saved in:

Bibliographic Details
Main Authors:	Holzbauer, Florian, Schmidt, David, Gegenhuber, Gabriel, Schrittwieser, Sebastian, Ullrich, Johanna
Format:	Preprint
Published:	2026
Subjects:	Cryptography and Security Artificial Intelligence
Online Access:	Acceder al recurso
Tags:	Add Tag No Tags, Be the first to tag this record!

Similar Items

A Relay a Day Keeps the AirTag Away: Practical Relay Attacks on Apple's AirTags
by: Gegenhuber, Gabriel K., et al.
Published: (2026)

Careless Whisper: Exploiting Silent Delivery Receipts to Monitor Users on Mobile Instant Messengers
by: Gegenhuber, Gabriel K., et al.
Published: (2024)

Towards Secure Agent Skills: Architecture, Threat Taxonomy, and Security Analysis
by: Li, Zhiyuan, et al.
Published: (2026)

An Extended View on Measuring Tor AS-level Adversaries
by: Gegenhuber, Gabriel Karl, et al.
Published: (2024)

Benchmarking Security Risk Detection and Verification in Open Agentic Skill Ecosystems
by: Hossain, Ismail, et al.
Published: (2026)

SkillTester: Benchmarking Utility and Security of Agent Skills
by: Wang, Leye, et al.
Published: (2026)

Technical Report: Exploring the Emerging Threats of the Agent Skill Ecosystem
by: Beurer-Kellner, Luca, et al.
Published: (2026)

Systematization of Knowledge: Security and Safety in the Model Context Protocol Ecosystem
by: Gaire, Shiva, et al.
Published: (2025)

Proteus: A Self-Evolving Red Team for Agent Skill Ecosystems
by: Zhou, Zhaojiacheng
Published: (2026)

A First Look at the Security Issues in the Model Context Protocol Ecosystem
by: Li, Xiaofan, et al.
Published: (2025)

Democratizing Measurement of Critical Mobile Infrastructure: Security and Privacy in an Increasingly Centralized Communication Ecosystem
by: Gegenhuber, Gabriel K.
Published: (2026)

Supply Chain Insecurity: Exposing Vulnerabilities in iOS Dependency Management Systems
by: Schmidt, David, et al.
Published: (2026)

SecRepoBench: Benchmarking Code Agents for Secure Code Completion in Real-World Repositories
by: Shen, Chihao, et al.
Published: (2025)

Diffie-Hellman Picture Show: Key Exchange Stories from Commercial VoWiFi Deployments
by: Gegenhuber, Gabriel Karl, et al.
Published: (2024)

Structured Security Auditing and Robustness Enhancement for Untrusted Agent Skills
by: Lv, Lijia, et al.
Published: (2026)

Hey there! You are using WhatsApp: Enumerating Three Billion Accounts for Security and Privacy
by: Gegenhuber, Gabriel K., et al.
Published: (2025)

When Safe Skills Collide: Measuring Compositional Risk in Agent Skill Ecosystems
by: Wang, Su, et al.
Published: (2026)

SkCC: Portable and Secure Skill Compilation for Cross-Framework LLM Agents
by: Ouyang, Yipeng, et al.
Published: (2026)

The PBSAI Governance Ecosystem: A Multi-Agent AI Reference Architecture for Securing Enterprise AI Estates
by: Willis, John M.
Published: (2026)

Breaking the Protocol: Security Analysis of the Model Context Protocol Specification and Prompt Injection Vulnerabilities in Tool-Integrated LLM Agents
by: Maloyan, Narek, et al.
Published: (2026)

Supply-Chain Poisoning Attacks Against LLM Coding Agent Skill Ecosystems
by: Qu, Yubin, et al.
Published: (2026)

Agent Audit: A Security Analysis System for LLM Agent Applications
by: Zhang, Haiyue, et al.
Published: (2026)

BadSkill: Backdoor Attacks on Agent Skills via Model-in-Skill Poisoning
by: Tie, Guiyao, et al.
Published: (2026)

Red-Teaming Agent Execution Contexts: Open-World Security Evaluation on OpenClaw
by: Yao, Hongwei, et al.
Published: (2026)

Poster: ClawdGo: Endogenous Security Awareness Training for Autonomous AI Agents
by: Li, Jiaqi, et al.
Published: (2026)

SkillJect: Effectively Automating Skill-Based Prompt Injection for Skill-Enabled Agents
by: Jia, Xiaojun, et al.
Published: (2026)

SkillTrojan: Backdoor Attacks on Skill-Based Agent Systems
by: Feng, Yunhao, et al.
Published: (2026)

MCP Security Bench (MSB): Benchmarking Attacks Against Model Context Protocol in LLM Agents
by: Zhang, Dongsen, et al.
Published: (2025)

Measuring Safety Alignment Effects in Autonomous Security Agents
by: David, Isaac, et al.
Published: (2026)

A Security Analysis of the OpenClaw AI Agent Framework
by: Suwansathit, Surada, et al.
Published: (2026)

MCPThreatHive: Automated Threat Intelligence for Model Context Protocol Ecosystems
by: Shen, Yi Ting, et al.
Published: (2026)

HarmfulSkillBench: How Do Harmful Skills Weaponize Your Agents?
by: Jiang, Yukun, et al.
Published: (2026)

Security of AI Agents
by: He, Yifeng, et al.
Published: (2024)

Servant, Stalker, Predator: How An Honest, Helpful, And Harmless (3H) Agent Unlocks Adversarial Skills
by: Noever, David
Published: (2025)

SkillSieve: A Hierarchical Triage Framework for Detecting Malicious AI Agent Skills
by: Hou, Yinghan, et al.
Published: (2026)

MCP-DPT: A Defense-Placement Taxonomy and Coverage Analysis for Model Context Protocol Security
by: Rostamzadeh, Mehrdad, et al.
Published: (2026)

Taming OpenClaw: Security Analysis and Mitigation of Autonomous LLM Agent Threats
by: Deng, Xinhao, et al.
Published: (2026)

Provably Secure Agent Guardrail
by: Wu, Benlong, et al.
Published: (2026)

AgentTrap: Measuring Runtime Trust Failures in Third-Party Agent Skills
by: Zhuang, Haomin, et al.
Published: (2026)

Repository-Level Graph Representation Learning for Enhanced Security Patch Detection
by: Wen, Xin-Cheng, et al.
Published: (2024)