Type: url
Original: https://arxiv.org/abs/2604.02837
Status: generated
Summary
The arXiv abstract page for a security analysis of the Agent Skills framework, which defines a four-phase skill lifecycle (Creation, Distribution, Deployment, Execution) and a threat taxonomy of seven categories and seventeen scenarios across three attack layers, validated against five confirmed incidents. It concludes that the most severe threats stem from structural properties of the framework, such as the absence of a data-instruction boundary and a single-approval persistent trust model.