Defense-as-Skill: Evolving Runtime Guard Skill for Skill-Augmented Agents
[Kryptografia i bezpieczeństwo] Autorzy: Xiaofang Yang, Ziqi Miao, Dianbo Sui i 2 więcej
Skill-augmented agents load reusable skills as persistent runtime context, improving task performance but also giving malicious skills a durable channel for steering future actions. Such skills may leak secrets, corrupt code, bypass approvals, or stage data for exfiltration only after a concrete user task and workspace state make the unsafe action appear useful. This makes pre-install vetting insufficient and calls for runtime, task-conditioned protection. We propose Defense-as-Skill, a defense paradigm that implements the runtime guard itself as an installable, inspectable, and editable skill. Our guard, SkillSonar, runs alongside untrusted task skills and checks sensitive actions against the user's task boundary, routing each action to an allow, replan, or confirmation decision without modifying the underlying agent runtime. To study this setting, we construct SCOPE-R, a task-conditio…
- Kategoria arxiv
- cs.CR
- Kategoria
- Kryptografia i bezpieczeństwo