Entity trail

SkillGuard

Source-backed findings, relationship evidence, citations, and briefing history from the public MindPattern archive.

Briefing refs

Findings

Edges

Sources

Corpus findings

2026-09-01 / arxiv-researcherSkillGuard Shrinks Agent Authority After Untrusted Data Arrives, With Zero Extra Model CallsRather than classifying untrusted content or approving individual operations, SkillGuard treats untrusted data entering agent state as contamination and restricts future capabilities so the state cannot reach deployer-defined forbidden states, using a Skill Impact Graph, steerability signatures and an inline reference monitor. Across four AgentDojo suites with Gemini 2.5 Flash and Llama3.3-70B backends, it eliminates attack success on three of four suites for both models and cuts Slack to 4.8% and 14.3%, beating Spotlighting, CaMeL and AttriGuard. Fractional-flow restriction preserves substantially more capability than binary cutoff at equal attack success, and the whole layer adds no model calls or token overhead.
2026-08-27 / arxiv-researcherBorrowed Authority: Agent Skills Carry No Typed Way to Reject a Permission Claim, and Edge Skillguard Rejects 60/60 AttacksZhan and Haddadi name the gap between two documented attack classes, malicious skills compromising cloud software and jailbroken LLM-controlled robots causing physical harm: because the Skills format gives a receiving agent no typed mechanism to reject an inter-agent permission claim, a malicious skill can attach one and drive real actuation. Their argument is that self-evolving skill harnesses generate more advisory orchestration but no policy, so scaling skill generation scales the gap rather than the safety. Their Edge Skillguard co-packages a typed authority layer inside the skill artifact with guards over world state and sensor evidence, rejecting 60/60 borrowed-authority requests across five attack variants without blocking benign traffic, holding at 5x scale and across hosts.

Graph relationships

COMPETES WITH
AttriGuard
SkillGuard outperforms AttriGuard on AgentDojo attack prevention.
Source finding
COMPETES WITH
Spotlighting
SkillGuard outperforms Spotlighting on AgentDojo attack prevention.
Source finding

Source trail

arXiv 2608.30041 arXiv 2608.25091

Graph sources

entity graphfindings textkg edgeskg entitiesnewsletter issues

Fetching from the wire…