Beyond Maliciousness: Static and Runtime Attack-Surface Profiling of Agent Skills

본문 미리보기

arXiv:2610.19264v1 Announce Type: new Abstract: Agent skills are Markdown documents that a tool-using agent reads as instructions and then acts on with the privileges of the session that loaded them. Installing one grants authority (the standing to direct the agent, not new privilege), and the size of that grant is what we measure. We present a two-phase attack-surface profiling methodology that combines whole-bundle static analysis and dependency provenance checking with instrumented sandbox e