{"id":"https://openalex.org/W7161127258","doi":"https://doi.org/10.48550/arxiv.2605.12875","title":"Do Skill Descriptions Tell the Truth? Detecting Undisclosed Security Behaviors in Code-Backed LLM Skills","display_name":"Do Skill Descriptions Tell the Truth? Detecting Undisclosed Security Behaviors in Code-Backed LLM Skills","publication_year":2026,"publication_date":"2026-05-13","ids":{"openalex":"https://openalex.org/W7161127258","doi":"https://doi.org/10.48550/arxiv.2605.12875"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2605.12875","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.12875","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2605.12875","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5136162778","display_name":"Wenhui He","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"He, Wenhui","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5136137977","display_name":"Yue Li","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Li, Yue","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5136093366","display_name":"Bang Fu","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Fu, Bang","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5136132911","display_name":"Huan Xing","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Xing, Huan","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5136144242","display_name":"Xing Fan","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Fan, Xing","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5124804335","display_name":"Zehua Zhang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zhang, ZeHua","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5033118635","display_name":"Baoning Niu","orcid":"https://orcid.org/0000-0002-7924-3384"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Niu, Baoning","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.1859000027179718,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.1859000027179718,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.13940000534057617,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.13449999690055847,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/credential","display_name":"Credential","score":0.8564000129699707},{"id":"https://openalex.org/keywords/taxonomy","display_name":"Taxonomy (biology)","score":0.6425999999046326},{"id":"https://openalex.org/keywords/recall","display_name":"Recall","score":0.5590000152587891},{"id":"https://openalex.org/keywords/implementation","display_name":"Implementation","score":0.5175999999046326},{"id":"https://openalex.org/keywords/executable","display_name":"Executable","score":0.5131999850273132},{"id":"https://openalex.org/keywords/consistency","display_name":"Consistency (knowledge bases)","score":0.49320000410079956}],"concepts":[{"id":"https://openalex.org/C2777810591","wikidata":"https://www.wikidata.org/wiki/Q16861606","display_name":"Credential","level":2,"score":0.8564000129699707},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6435999870300293},{"id":"https://openalex.org/C58642233","wikidata":"https://www.wikidata.org/wiki/Q8269924","display_name":"Taxonomy (biology)","level":2,"score":0.6425999999046326},{"id":"https://openalex.org/C100660578","wikidata":"https://www.wikidata.org/wiki/Q18733","display_name":"Recall","level":2,"score":0.5590000152587891},{"id":"https://openalex.org/C26713055","wikidata":"https://www.wikidata.org/wiki/Q245962","display_name":"Implementation","level":2,"score":0.5175999999046326},{"id":"https://openalex.org/C160145156","wikidata":"https://www.wikidata.org/wiki/Q778586","display_name":"Executable","level":2,"score":0.5131999850273132},{"id":"https://openalex.org/C2776436953","wikidata":"https://www.wikidata.org/wiki/Q5163215","display_name":"Consistency (knowledge bases)","level":2,"score":0.49320000410079956},{"id":"https://openalex.org/C2780801425","wikidata":"https://www.wikidata.org/wiki/Q5164392","display_name":"Construct (python library)","level":2,"score":0.3840000033378601},{"id":"https://openalex.org/C2778012447","wikidata":"https://www.wikidata.org/wiki/Q1034415","display_name":"Scope (computer science)","level":2,"score":0.3747999966144562},{"id":"https://openalex.org/C81669768","wikidata":"https://www.wikidata.org/wiki/Q2359161","display_name":"Precision and recall","level":2,"score":0.3610999882221222},{"id":"https://openalex.org/C2778491294","wikidata":"https://www.wikidata.org/wiki/Q1339824","display_name":"Mindset","level":2,"score":0.3443000018596649},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.3440000116825104},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3158999979496002},{"id":"https://openalex.org/C189950617","wikidata":"https://www.wikidata.org/wiki/Q937228","display_name":"Property (philosophy)","level":2,"score":0.302700012922287},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.2743000090122223},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.2605000138282776},{"id":"https://openalex.org/C15744967","wikidata":"https://www.wikidata.org/wiki/Q9418","display_name":"Psychology","level":0,"score":0.25360000133514404},{"id":"https://openalex.org/C56739046","wikidata":"https://www.wikidata.org/wiki/Q192060","display_name":"Knowledge management","level":1,"score":0.2502000033855438}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2605.12875","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.12875","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2605.12875","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.12875","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"display_name":"Quality Education","id":"https://metadata.un.org/sdg/4","score":0.7371872067451477}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Programmatic":[0],"skills":[1,73,121],"in":[2,64,151],"LLM":[3],"ecosystems":[4],"consist":[5],"of":[6,130,135,144,148],"a":[7,128,133],"natural-language":[8],"description":[9,20,44],"and":[10,15,74,97,132,170],"executable":[11],"implementation":[12,28,57,153],"files.":[13],"Users":[14],"LLMs":[16],"rely":[17],"on":[18,82],"the":[19,23,27,43,56,60,65,157,168,171,175,185],"to":[21,181,191],"understand":[22],"skill's":[24],"scope.":[25],"However,":[26],"may":[29],"perform":[30],"security-relevant":[31,61],"operations,":[32],"such":[33],"as":[34],"credential":[35],"access,":[36],"network":[37],"communication,":[38],"or":[39],"command":[40],"execution,":[41],"that":[42,166],"does":[45],"not":[46],"state.":[47],"We":[48,67],"study":[49],"this":[50,83],"description--implementation":[51],"inconsistency":[52,141],"by":[53],"asking":[54],"whether":[55],"stays":[58],"within":[59,156],"scope":[62],"declared":[63,158],"description.":[66],"manually":[68],"analyze":[69],"920":[70],"real-world":[71],"programmatic":[72,120],"construct":[75],"an":[76],"11-category":[77],"security":[78,91],"property":[79,92],"taxonomy.":[80],"Based":[81],"taxonomy,":[84],"we":[85],"build":[86],"SKILLSCOPE,":[87],"which":[88,152],"constructs":[89],"source-level":[90,105],"graphs":[93],"(SPGs)":[94],"from":[95,179,189],"implementations":[96],"performs":[98],"LLM-assisted":[99],"consistency":[100],"checking.":[101,117],"SPG":[102,169,186],"nodes":[103],"retain":[104],"code":[106],"patterns":[107],"rather":[108],"than":[109],"abstract":[110],"taxonomy":[111,172,176],"labels,":[112],"preserving":[113],"fine-grained":[114],"evidence":[115],"for":[116,137,161],"On":[118],"4,556":[119],"with":[122],"double-blind":[123],"human":[124],"review,":[125],"SKILLSCOPE":[126],"achieves":[127],"precision":[129,178],"84.8\\%":[131],"recall":[134,188],"96.5\\%":[136],"identifying":[138],"inconsistency.":[139],"Confirmed":[140],"affects":[142],"9.4\\%":[143],"skills,":[145],"while":[146,183],"cases":[147],"coarser":[149],"description,":[150],"details":[154],"remain":[155],"scope,":[159],"account":[160],"24.3\\%.":[162],"Ablation":[163],"experiments":[164],"confirm":[165],"both":[167],"contribute:":[173],"removing":[174,184],"reduces":[177,187],"87.8\\%":[180],"72.3\\%,":[182],"94.7\\%":[190],"79.0\\%.":[192]},"counts_by_year":[],"updated_date":"2026-07-01T06:00:48.157686","created_date":"2026-05-15T00:00:00"}