LATIDIA · Ciberseguridad

Hacia habilidades de agente seguro: arquitectura, taxonomía de amenazas y análisis de seguridad

arXiv: 2604.02837v2Tipo de anuncio: reemplazar Resumen: Agent Skills es un estándar abierto emergente que define un formato de empaquetado modular basado en el sistema de archivos que permite a los agentes basados en LLM adquirir experiencia específica de dominio en de

La noticia

arXiv:2604.02837v2 Announce Type: replace Abstract: Agent Skills is an emerging open standard that defines a modular, filesystem-based packaging format enabling LLM-based agents to acquire domain-specific expertise on demand. Despite rapid adoption across multiple agentic platforms and the emergence of large community marketplaces, the security properties of Agent Skills have not been systematically studied. This paper presents a systematization of the security of the Agent Skills framework. We define a threat model for the framework and decompose the full lifecycle of an Agent Skill across four phases---Creation, Distribution, Deployment, and Execution---identifying the structural attack surface each phase introduces. Building on this lifecycle analysis, we construct a threat taxonomy comprising seven categories