Fetching from the wire…
Skills2026-08-11 · source-backed
ColluSkill hit 96% attack success against six scanners by splitting one malicious workflow across several individually-benign skills. Adopt ChainGuard's approach: analyze each candidate skill against what's already installed, checking for artifact-passing and execution-handoff chains between them. Per-file scanning is structurally blind to composition.
Each link below shares sources, entities, or timing with this story.
Shared entity: ColluSkill / Same source / Shared topic
Both cover ColluSkill; cite the same source (ColluSkill); overlapping topics (against, attack, candidate, skill).
Shared entity: Review / Same source domain / Earlier coverage / Tension
Both cover Review; reported by the same outlet (arxiv.org); earlier Review coverage from 2026-08-03.
Same source domain / Shared topic
Reported by the same outlet (arxiv.org); overlapping topics (against, approach, attack, candidate, skill).
Same source domain / Shared topic / Tension
Reported by the same outlet (arxiv.org); overlapping topics (against, already, skill); pushes against this story (against).
Reported by the same outlet (arxiv.org); overlapping topics (against, already, attack); pushes against this story (against).
Same source domain / Shared topic / Downstream implication
Reported by the same outlet (arxiv.org); overlapping topics (attack, between, chain); traces where this leads (downstream).
Same source domain / Shared topic / Tension
Reported by the same outlet (arxiv.org); overlapping topics (against, already, attack); pushes against this story (against).
Reported by the same outlet (arxiv.org); overlapping topics (against, between, candidate); pushes against this story (against).