Fetching from the wire…
01
02
03
04
05
06
07
08
Skills2026-08-11 · source-backed
ColluSkill hit 96% attack success against six scanners by splitting one malicious workflow across several individually-benign skills. Adopt ChainGuard's approach: analyze each candidate skill against what's already installed, checking for artifact-passing and execution-handoff chains between them. Per-file scanning is structurally blind to composition.
Each link below shares sources, entities, or timing with this story.
arXiv 2608.09732 exploits the fact that every current skill scanner inspects skills individually. Decompose the malicious workflow into interdependent sub-payloads packaged as separately-plausible skills, connected through artifact passing and execution handoffs, and nothing i...
arXiv 2609.17598 studies PRs from OpenAI Codex, Devin, GitHub Copilot, Cursor and Claude Code across 2,807 repositories (Dec 2024 to Jul 2025), combining AIDev with 58,792 cached GitHub API responses. Codex PRs were reverted 6.1% of the time against a human baseline of 11.5% (...
13 public sources consolidated into 9,740 skills (7,505 malicious, 2,235 benign) across 11 harmonized attack categories. Learned text detectors score 0.882-0.932 Macro-F1 under random splits but collapse to 0.653-0.665 source-disjoint. arXiv Three off-the-shelf skill scanners...
Models navigate to the correct file for 92%+ of required deletions but cut the exact target line only 52% of the time, and 29% of passing patches wrap dead code in a conditional instead of removing it. Grep the diff for newly added if guards around code the task said to delete...
arXiv 2607.06283 attacks the problem that growing skill libraries make selection harder. It decomposes on both the task and skill side, builds a DAG with intermediate task states as nodes and candidate skills as edges, then cross-encodes over candidates per task interval. On A...
Skill Issue points out that auto-synthesized skill documents get optimized against tasks a capable agent already solves with no document at all, leaving the optimizer nothing to measure. The fix is mining harder tasks by reverting merged PRs at a frozen base commit. On three K...
MindPattern daily
One email a day at 7 AM. Sources and a take on every story. Unsubscribe anytime.