Surviving the Router: Optimizing Skill Injections for Retrieval and Execution

Excerpt

arXiv:2610.08098v1 Announce Type: cross Abstract: AI agents increasingly rely on modular third-party "skills" that are dynamically selected by skill routers to execute complex tasks. While recent studies highlight the threat of prompt injections embedded in these skills, existing evaluations often assume settings where the malicious skill is already selected for execution. We show that this assumption can substantially overestimate attack success. In realistic multi-skill environments, injected