Fetching from the wire…
01
02
03
04
05
06
07
08
Skills2026-08-11 · source-backed
ColluSkill hit 96% attack success against six scanners by splitting one malicious workflow across several individually-benign skills. Adopt ChainGuard's approach: analyze each candidate skill against what's already installed, checking for artifact-passing and execution-handoff chains between them. Per-file scanning is structurally blind to composition.
Each link below shares sources, entities, or timing with this story.
arXiv 2608.09732 exploits the fact that every current skill scanner inspects skills individually. Decompose the malicious workflow into interdependent sub-payloads packaged as separately-plausible skills, connected through artifact passing and execution handoffs, and nothing i...
13 public sources consolidated into 9,740 skills (7,505 malicious, 2,235 benign) across 11 harmonized attack categories. Learned text detectors score 0.882-0.932 Macro-F1 under random splits but collapse to 0.653-0.665 source-disjoint. arXiv Three off-the-shelf skill scanners...
Models navigate to the correct file for 92%+ of required deletions but cut the exact target line only 52% of the time, and 29% of passing patches wrap dead code in a conditional instead of removing it. Grep the diff for newly added if guards around code the task said to delete...
arXiv 2607.06283 attacks the problem that growing skill libraries make selection harder. It decomposes on both the task and skill side, builds a DAG with intermediate task states as nodes and candidate skills as edges, then cross-encodes over candidates per task interval. On A...
It synthesizes attack tool-chains in a sandbox, verifies them, renders the verified chain as one natural-looking prompt, embeds state-transition cues in target tool descriptions, and corrects drift mid-run (arXiv 2608.30441). Against Codex, Claude Code and OpenClaw-style harne...
SkillForge (arXiv 2608.24747) notes that skill-extraction approaches like SkillRL never verify whether a stored skill still works against the current environment, so the bank grows monotonically while quality rots. It makes skill usage explicit during interaction so RL optimiz...
MindPattern daily
One email a day at 7 AM. Sources and a take on every story. Unsubscribe anytime.