{"data":{"id":"c1312c4e-c62c-405a-8ee2-1809f88ec512","title":"SkillCODER: Towards Auditing and Attribution of Copyright Infringement in LLM Agent Skills","summary":"SkillCODER is a black-box, content-only method for auditing copyright and attributing buyers of LLM agent skills. It embeds a dormant, Artifact-Gated Capsule into a skill, with buyer-specific fingerprints encoded through Controlled-Vocabulary Error-Correcting Codes. Across three domains, six models and three agent frameworks, it reports 99.2% owner verification and 99.3% buyer Top-1 attribution accuracy.","solution":"N/A -- no mitigation discussed in source.","labels":["research","security"],"sourceUrl":"https://arxiv.org/abs/2611.11308v1","publishedAt":"2026-11-08T11:21:59.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"info","attackType":["other"],"issueType":"research","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["LLM agent skills","LLM agents","agent frameworks"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"epssCheckedAt":null,"kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":null,"disclosureDate":"2026-11-08T11:21:59.000Z","fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":null,"crossRefCount":0,"attackSophistication":"advanced","impactType":["integrity"],"aiComponentTargeted":"agent","llmSpecific":true,"classifierConfidence":0.9,"researchCategory":"preprint","atlasIds":null}}