{"total":28,"rows":[{"id":"2602.12430","title":"Agent Skills for Large Language Models: Architecture, Acquisition, Security, and the Path Forward","created":"2026-02-12","cited_by_count":113,"area":"agents"},{"id":"2601.10338","title":"Agent Skills in the Wild: An Empirical Study of Security Vulnerabilities at Scale","created":"2026-01-15","cited_by_count":105,"area":"agents"},{"id":"2602.20156","title":"Skill-Inject: Measuring Agent Vulnerability to Skill File Attacks","created":"2026-02-23","cited_by_count":90,"area":"agents"},{"id":"2602.08004","title":"Agent Skills: A Data-Driven Analysis of Claude Skills for Extending Large Language Model Functionality","created":"2026-02-08","cited_by_count":72,"area":"agents"},{"id":"2603.02176","title":"Organizing, Orchestrating, and Benchmarking Agent Skills at Ecosystem Scale","created":"2026-03-02","cited_by_count":72,"area":"agents"},{"id":"2602.06547","title":"\"Do Not Mention This to the User\": Detecting and Understanding Malicious Agent Skills in the Wild","created":"2026-02-06","cited_by_count":50,"area":"agents"},{"id":"2604.04989","title":"SkillAttack: Automated Red Teaming of Agent Skills through Attack Path Refinement","created":"2026-04-05","cited_by_count":30,"area":"agents"},{"id":"2602.14211","title":"SkillJect: Effectively Automating Skill-Based Prompt Injection for Skill-Enabled Agents","created":"2026-02-15","cited_by_count":25,"area":"agents"},{"id":"2604.03070","title":"How Your Credentials Are Leaked by LLM Agent Skills: An Empirical Study","created":"2026-04-03","cited_by_count":19,"area":"agents"},{"id":"2604.02837","title":"Towards Secure Agent Skills: Architecture, Threat Taxonomy, and Security Analysis","created":"2026-04-03","cited_by_count":13,"area":"agents"},{"id":"2606.02540","title":"SkillHarm: Lifecycle-Aware Skill-Based Attacks via Automated Construction","created":"2026-06-01","cited_by_count":6,"area":"agents"},{"id":"2607.01456","title":"From Anatomy to Smells: An Empirical Study of SKILL.md in Agent Skills","created":"2026-07-01","cited_by_count":6,"area":"agents"},{"id":"2607.10113","title":"Dynamic Agent Skills: A Lifecycle Survey and Taxonomy of Evolving Skill Libraries","created":"2026-07-11","cited_by_count":6,"area":"agents"},{"id":"2605.05868","title":"SkillScope: Toward Fine-Grained Least-Privilege Enforcement for Agent Skills","created":"2026-05-07","cited_by_count":5,"area":"agents"},{"id":"2604.23853","title":"ClawTrace: Cost-Aware Tracing for LLM Agent Skill Distillation","created":"2026-04-26","cited_by_count":4,"area":"agents"},{"id":"2608.09732","title":"ColluSkill: Adversarial Cross-Skill Composition for Evading Agent Skill Scanners","created":"2026-08-10","cited_by_count":4,"area":"agents"},{"id":"2607.20121","title":"OpenSkillRisk: Benchmarking Agent Safety When Using Real-World Risky Third-Party Skills","created":"2026-07-22","cited_by_count":3,"area":"agents"},{"id":"2606.13385","title":"Who Pays the Price? Stakeholder-Centric Prompt Injection Benchmarking for Real-world Web Agents","created":"2026-06-11","cited_by_count":2,"area":"agents"},{"id":"2609.00065","title":"Scientific Agent Skills: A Library of Procedural Knowledge for Research Agents","created":"2026-08-30","cited_by_count":2,"area":"agents"},{"id":"2604.27358","title":"Safe Bilevel Delegation (SBD): A Formal Framework for Runtime Delegation Safety in Multi-Agent Systems","created":"2026-04-30","cited_by_count":0,"area":"agents"},{"id":"2606.04628","title":"RAMPART: Registry-based Agentic Memory with Priority-Aware Runtime Transformation","created":"2026-06-03","cited_by_count":0,"area":"agents"},{"id":"2608.21929","title":"SkillBloat: Token Amplification Attacks via Skill Injection in LLM Coding Agents","created":"2026-08-22","cited_by_count":0,"area":"agents"},{"id":"2608.29596","title":"Towards a Systems Foundation for Agentic Skills: Architecture, Lifecycle, and Security","created":"2026-08-30","cited_by_count":0,"area":"agents"},{"id":"2608.30441","title":"ECLIPSE: Self-Evolving Stealthy Prompt Injection Attack against Long-Horizon Agentic Systems","created":"2026-08-31","cited_by_count":0,"area":"agents"},{"id":"2609.13353","title":"SkillAtlas: An Attack Trace Library for Agent Skills","created":"2026-09-11","cited_by_count":0,"area":"agents"},{"id":"2609.30383","title":"Stealth Apart, Harm Together: Skill Cascading Attacks on Skill-Based Agent Systems","created":"2026-09-24","cited_by_count":0,"area":"agents"},{"id":"2609.39352","title":"Hiding in Plain Sight: Decoupling Pretext from Actuation for Skill Poisoning in LLM Agents","created":"2026-09-30","cited_by_count":0,"area":"agents"},{"id":"2610.18262","title":"Encrypted Skills Can Become New Security Exploits If AI Agents Know How to Decipher","created":"2026-10-13","cited_by_count":0,"area":"agents"}],"next_cursor":null}