CoRedSkill: Stealthy Skill Composition Attacks Via AST-Guided Injection

Agents extend their capabilities through reusable skills that package instructions, executable code, and resources. Composing these skills enables complex task workflows, but their dependencies can also connect malicious operations across skills, making their combined intent difficult to identify...