CoSA: The Conflict of Skills Attack in Real-World LLM Agent Ecosystems

Agent Skills allow LLM agents to combine reusable capabilities, but checking each Skill in isolation cannot rule out policy violations when they are composed. We term such failures Conflict of Skills CoS: artifacts or assessment signals produced for one purpose may be reused downstream without...