{"id":"https://openalex.org/W7164886114","doi":"https://doi.org/10.48550/arxiv.2606.16287","title":"Dynamic Malicious Skills in Agentic AI","display_name":"Dynamic Malicious Skills in Agentic AI","publication_year":2026,"publication_date":"2026-06-15","ids":{"openalex":"https://openalex.org/W7164886114","doi":"https://doi.org/10.48550/arxiv.2606.16287"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2606.16287","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.16287","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2606.16287","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5050105433","display_name":"T X Chen","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Chen, Tianhao","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5138721897","display_name":"Zhengyuan Jiang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Jiang, Zhengyuan","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5138690057","display_name":"Yuepeng Hu","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Hu, Yuepeng","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5138714399","display_name":"Yebei Gou","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Gou, Yebei","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5138702226","display_name":"Neil Zhenqiang Gong","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Gong, Neil Zhenqiang","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.4602000117301941,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.4602000117301941,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.10170000046491623,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.0908999964594841,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/component","display_name":"Component (thermodynamics)","score":0.5917999744415283},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.5791000127792358},{"id":"https://openalex.org/keywords/documentation","display_name":"Documentation","score":0.5194000005722046},{"id":"https://openalex.org/keywords/attack-surface","display_name":"Attack surface","score":0.42559999227523804},{"id":"https://openalex.org/keywords/embedding","display_name":"Embedding","score":0.37709999084472656}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6424999833106995},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5917999744415283},{"id":"https://openalex.org/C168167062","wikidata":"https://www.wikidata.org/wiki/Q1117970","display_name":"Component (thermodynamics)","level":2,"score":0.5917999744415283},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.5791000127792358},{"id":"https://openalex.org/C56666940","wikidata":"https://www.wikidata.org/wiki/Q788790","display_name":"Documentation","level":2,"score":0.5194000005722046},{"id":"https://openalex.org/C2776576444","wikidata":"https://www.wikidata.org/wiki/Q303569","display_name":"Attack surface","level":2,"score":0.42559999227523804},{"id":"https://openalex.org/C107457646","wikidata":"https://www.wikidata.org/wiki/Q207434","display_name":"Human\u2013computer interaction","level":1,"score":0.38269999623298645},{"id":"https://openalex.org/C41608201","wikidata":"https://www.wikidata.org/wiki/Q980509","display_name":"Embedding","level":2,"score":0.37709999084472656},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.3407999873161316},{"id":"https://openalex.org/C204323151","wikidata":"https://www.wikidata.org/wiki/Q905424","display_name":"Range (aeronautics)","level":2,"score":0.3303000032901764},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.2815000116825104},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.25859999656677246}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2606.16287","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.16287","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2606.16287","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.16287","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"score":0.82449871301651,"id":"https://metadata.un.org/sdg/4","display_name":"Quality Education"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Skills":[0],"are":[1],"a":[2,82,99],"key":[3],"enabling":[4],"component":[5],"of":[6,84,106,129],"agentic":[7,66],"AI.":[8],"While":[9],"they":[10,14],"enhance":[11],"agents'":[12],"capabilities,":[13],"also":[15],"introduce":[16,81],"new":[17],"attack":[18,27,64],"surfaces.":[19],"In":[20],"this":[21,63,95,118],"work,":[22],"we":[23,97],"investigate":[24],"one":[25],"such":[26,68],"surface":[28],"by":[29],"demonstrating":[30],"dynamic":[31,76,104,122],"malicious":[32,36,52,77,85,123],"skills.":[33,131],"By":[34],"embedding":[35],"instructions":[37],"in":[38],"natural-language":[39],"documentation":[40],"(e.g.,":[41],"SKILL.md),":[42],"an":[43,47,55],"attacker":[44],"can":[45,79],"induce":[46],"agent":[48],"to":[49],"dynamically":[50],"inject":[51],"logic":[53],"into":[54],"otherwise":[56],"benign":[57,130],"skill":[58],"during":[59],"execution.":[60],"We":[61],"evaluate":[62],"across":[65],"frameworks":[67],"as":[69],"OpenHands":[70],"and":[71],"Claude":[72],"Code,":[73],"showing":[74],"that":[75,102,117],"skills":[78,107,124],"successfully":[80],"range":[83],"behaviors":[86],"at":[87],"runtime":[88],"with":[89],"non-trivial":[90],"success":[91],"rates.":[92],"To":[93],"mitigate":[94],"vulnerability,":[96],"propose":[98],"system-level":[100],"defense":[101,119],"prevents":[103],"modification":[105],"using":[108],"operating":[109],"system":[110],"kernel-enforced":[111],"read-only":[112],"mounts.":[113],"Our":[114],"evaluation":[115],"demonstrates":[116],"effectively":[120],"blocks":[121],"while":[125],"preserving":[126],"the":[127],"functionality":[128]},"counts_by_year":[],"updated_date":"2026-07-01T06:00:48.157686","created_date":"2026-06-17T00:00:00"}