Runaway Reaction: When Benign Skills Compose into Malicious Behavior

Excerpt

arXiv:2610.05943v1 Announce Type: cross Abstract: Agent skills package task-specific knowledge and procedures that can be composed to support complex agent tasks, while public marketplaces provide a growing pool of reusable skills. Existing security vetting, however, largely evaluates skills in isolation, leaving composition-induced risks underexplored. Such risks arise because composing benign skills expands the agent's capability space, enabling behaviors unavailable to any skill alone. Intere