Detecting Insecure Compositions of Clean Agent Skills via Capability-Flow Graph Analysis

Summary

KnotScryer detects insecure compositions of individually clean agent skills by modeling skills as typed capability flows and building a Skill Capability-Flow Graph of cross-skill information flow. Applied to 13,598 clean skills from ClawHub, it identified 612 insecure compositions, raising the exploitation rate under GLM-5.1 from 16.5%-18.2% to 85.6% while cutting the search space by 85.3%. Of the detected chains, 13.7% consisted entirely of skills a single-skill scanner labeled safe.

Related items

• MediumOpenAI, Anthropic disclosures spotlight growing AI containment challengeSimilar attack · CSO Online
• MediumBias in Qwen3-Coder ModelSimilar attack · Schneier on Security
• MediumCVE-2026-116104: Sony Neural Network Libraries code injection in NNP ConverterSimilar attack · NVD/CVE Database
• MediumCVE-2026-116103: Sony Neural Network Libraries code injection in encode param command handlerSimilar attack · NVD/CVE Database
• MediumPHP2Shell Exploitation Hits Government Entity Amid Global Scanning and Signs of AI-Assisted HackingSimilar attack · The Hacker News