SkillHarm: Lifecycle-Aware Skill-Based Attacks via Automated Construction

arXiv:2606.02540 · cs.CL · Submitted 2026-06-01 · Read on arXiv

cs.CL

Submitted: 2026-06-01

Updated: 2026-10-11

Terminology

• Benchmark — 2× in this paper · explained in 2 episodes
• Agent Skills — 1× in this paper · explained in 1 episode
• Fixed-Payload Poisoning — 1× in this paper
• Self-Mutating Poisoning — 1× in this paper

Related papers

• Exploring Solution Divergence and Its Effect on Large Language Model Problem Solving
• Ishigaki-IDS-Bench: A Benchmark for Generating Information Delivery Specification from BIM Information Requirements
• Subliminal Steering: Stronger Encoding of Hidden Signals
• MedStruct-S: A Benchmark for Key Discovery, Key-Conditioned QA and Semi-Structured Extraction from OCR Clinical Reports
• The End of Transformers? On Challenging Attention and the Rise of Sub-Quadratic Architectures
• Untangling the Mechanisms of Misleading Context in Medical Question Answering