PulseAugur
EN
LIVE 22:14:35

New SkillCloak technique evades AI agent security scanners

Researchers have developed SkillCloak, a method to conceal malicious AI agent skills by hiding their payloads in directories that scanners typically ignore. This technique was tested against numerous scanners and real malicious skills, successfully evading detection over 90% of the time. To counter these hidden threats, the team also proposed SKILLDETONATE, a defense mechanism that runs skills in a sandbox environment to catch these sophisticated attacks, achieving an 87% detection rate. AI

IMPACT This development highlights a novel evasion technique for AI agent security and a corresponding defense, indicating an ongoing arms race in AI agent security.

RANK_REASON The cluster describes a new security technique and defense mechanism for AI agents, detailed in a paper, which fits the research bucket. [lever_c_demoted from research: ic=1 ai=1.0]

Read on Mastodon — sigmoid.social →

AI-generated summary · Google Gemini · from 1 sources. How we write summaries →

New SkillCloak technique evades AI agent security scanners

COVERAGE [1]

  1. Mastodon — sigmoid.social TIER_1 English(EN) · [email protected] ·

    SkillCloak, from the HKUST team that wrote the Cloak and Detonate paper, hides a skill's payload in a folder the scanner skips and unpacks it only when the agen

    SkillCloak, from the HKUST team that wrote the Cloak and Detonate paper, hides a skill's payload in a folder the scanner skips and unpacks it only when the agent runs. Tested against 8 scanners and 1,613 real malicious skills, the packing trick got past every scanner more than 90…