{"id":"https://openalex.org/W7163182555","doi":"https://doi.org/10.48550/arxiv.2606.01567","title":"Defenses & Enablers For Skill Injection Attacks on Terminal Based Agents","display_name":"Defenses & Enablers For Skill Injection Attacks on Terminal Based Agents","publication_year":2026,"publication_date":"2026-06-01","ids":{"openalex":"https://openalex.org/W7163182555","doi":"https://doi.org/10.48550/arxiv.2606.01567"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2606.01567","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.01567","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2606.01567","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5137674377","display_name":"Yoshinari Fujinuma","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Fujinuma, Yoshinari","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5137666268","display_name":"Varun Gangal","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Gangal, Varun","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5137678370","display_name":"Traian Rebedea","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Rebedea, Traian","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5137694886","display_name":"Makesh Narasimhan Sreedhar","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Sreedhar, Makesh Narsimhan","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5052773688","display_name":"Prasoon Varshney","orcid":"https://orcid.org/0009-0008-8449-7400"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Varshney, Prasoon","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5014742037","display_name":"Rebecca Qian","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Qian, Rebecca","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5024319800","display_name":"A. Kannappan","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Kannappan, Anand","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10028","display_name":"Topic Modeling","score":0.24940000474452972,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10028","display_name":"Topic Modeling","score":0.24940000474452972,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.19609999656677246,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12026","display_name":"Explainable Artificial Intelligence (XAI)","score":0.09529999643564224,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/cognitive-reframing","display_name":"Cognitive reframing","score":0.7889999747276306},{"id":"https://openalex.org/keywords/task","display_name":"Task (project management)","score":0.5557000041007996},{"id":"https://openalex.org/keywords/mediation","display_name":"Mediation","score":0.5073000192642212},{"id":"https://openalex.org/keywords/guardian","display_name":"Guardian","score":0.5001999735832214},{"id":"https://openalex.org/keywords/terminal","display_name":"Terminal (telecommunication)","score":0.4287000000476837},{"id":"https://openalex.org/keywords/test","display_name":"Test (biology)","score":0.41929998993873596}],"concepts":[{"id":"https://openalex.org/C187029079","wikidata":"https://www.wikidata.org/wiki/Q958679","display_name":"Cognitive reframing","level":2,"score":0.7889999747276306},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5877000093460083},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5830000042915344},{"id":"https://openalex.org/C2780451532","wikidata":"https://www.wikidata.org/wiki/Q759676","display_name":"Task (project management)","level":2,"score":0.5557000041007996},{"id":"https://openalex.org/C179420905","wikidata":"https://www.wikidata.org/wiki/Q223871","display_name":"Mediation","level":2,"score":0.5073000192642212},{"id":"https://openalex.org/C2776680780","wikidata":"https://www.wikidata.org/wiki/Q15964604","display_name":"Guardian","level":2,"score":0.5001999735832214},{"id":"https://openalex.org/C2779664074","wikidata":"https://www.wikidata.org/wiki/Q3518405","display_name":"Terminal (telecommunication)","level":2,"score":0.4287000000476837},{"id":"https://openalex.org/C2777267654","wikidata":"https://www.wikidata.org/wiki/Q3519023","display_name":"Test (biology)","level":2,"score":0.41929998993873596},{"id":"https://openalex.org/C107457646","wikidata":"https://www.wikidata.org/wiki/Q207434","display_name":"Human\u2013computer interaction","level":1,"score":0.30889999866485596},{"id":"https://openalex.org/C148730421","wikidata":"https://www.wikidata.org/wiki/Q141090","display_name":"Encryption","level":2,"score":0.3075000047683716},{"id":"https://openalex.org/C25343380","wikidata":"https://www.wikidata.org/wiki/Q277521","display_name":"Relation (database)","level":2,"score":0.2743000090122223},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.2669000029563904},{"id":"https://openalex.org/C7515471","wikidata":"https://www.wikidata.org/wiki/Q1936882","display_name":"Stress testing (software)","level":2,"score":0.25200000405311584}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2606.01567","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.01567","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2606.01567","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.01567","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"display_name":"Quality Education","score":0.7161573171615601,"id":"https://metadata.un.org/sdg/4"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Large":[0],"language":[1],"model":[2],"(LLM)":[3],"agents":[4,23],"increasingly":[5],"rely":[6],"on":[7],"reusable":[8],"skills":[9],"i.e.":[10],"documents":[11],"describing":[12],"task-specific":[13],"procedures.":[14],"However,":[15],"this":[16,32],"introduces":[17],"a":[18,46,128],"new":[19],"attack":[20,71,89],"surface":[21],"for":[22,31,48],"to":[24,112,121],"manage.":[25],"We":[26],"study":[27],"two":[28],"complementary":[29],"directions":[30],"threat.":[33],"First,":[34],"we":[35,84],"evaluate":[36],"guardian-based":[37],"defenses:":[38],"an":[39],"intermediary":[40],"LLM":[41,65],"agent":[42,66],"that":[43,94,124],"acts":[44],"as":[45],"mediator":[47],"skill":[49],"file":[50],"access":[51],"(dynamic":[52],"guardian)":[53],"or":[54],"pre-rewrites":[55],"these":[56],"files":[57],"at":[58],"build":[59],"time":[60],"(static":[61],"guardian).":[62],"Across":[63],"three":[64],"families,":[67],"our":[68],"guardians":[69],"cut":[70],"success":[72],"rate":[73],"(ASR)":[74],"by":[75],"well":[76],"over":[77],"half":[78],"while":[79],"preserving":[80],"task":[81],"utility.":[82],"Second,":[83],"stress":[85],"test":[86],"them":[87],"through":[88],"reframing":[90,107],"using":[91],"four":[92],"attacks":[93],"preserve":[95],"the":[96,101,106,109,115],"malicious":[97],"instruction":[98],"but":[99,114],"change":[100],"phrasing.":[102],"For":[103],"non-guardian":[104],"setup,":[105],"pushes":[108],"ASR":[110],"up":[111],"81.4\\%,":[113],"dynamic":[116],"guardian":[117],"brings":[118],"it":[119],"down":[120],"18.6\\%,":[122],"showing":[123],"real-time":[125],"mediation":[126],"is":[127],"robust":[129],"defense.":[130]},"counts_by_year":[],"updated_date":"2026-07-28T07:46:37.118299","created_date":"2026-06-03T00:00:00"}