Supply-Chain Poisoning Attacks Against LLM Coding Agent Skill Ecosystems
Supply-Chain Poisoning Attacks Against LLM Coding Agent Skill Ecosystems explores This research identifies a novel supply-chain attack vector for LLM coding agents by embedding malicious logic in skill documentation, bypassing existing defenses.. Commercial viability score: 5/10 in LLM Security.
BUILDER'S SANDBOX
Build This Paper
Use an AI coding agent to implement this research.
OpenAI CodexAI Agent
Lightweight coding agent in your terminal.
Claude CodeAI Agent
Agentic coding tool for terminal workflows.
AntiGravity IDEScaffolding
AI agent mindset installer and workflow scaffolder.
CursorIDE
AI-first code editor built on VS Code.
VS CodeIDE
Free, open-source editor by Microsoft.
Recommended Stack
Startup Essentials
Estimated $11K - $15K over 6-10 weeks.
See exactly what it costs to build this -- with 3 comparable funded startups.
7-day free trial. Cancel anytime.
Discover the researchers behind this paper and find similar experts.
7-day free trial. Cancel anytime.
Related Papers
- Builds On ThisTowards Secure Agent Skills: Architecture, Threat Taxonomy, and Security AnalysisViability: 4.0
- Builds On ThisSilent Egress: When Implicit Prompt Injection Makes LLM Agents Leak Without a TraceViability: 4.0
- Builds On ThisCascade: Composing Software-Hardware Attack Gadgets for Adversarial Threat Amplification in Compound AI SystemsViability: 4.0
- Prior WorkMalicious Or Not: Adding Repository Context to Agent Skill ClassificationViability: 5.0
- Prior WorkThe Promptware Kill Chain: How Prompt Injections Gradually Evolved Into a Multi-Step Malware