InfoResearchPreprintLLM-specific
StealthyPoison: Manipulating LLM Agent Behavior through Procedural Poisoning of Third-Party Skills
- Published
- Record updated
Summary
StealthyPoison is a procedural poisoning attack that corrupts the decision-critical rules of a third-party agent skill while keeping its advertised functionality, so tasks fail without overt malicious instructions. The attack builds reusable poisoned procedures from a public skill using a surrogate agent, and augments retrieval metadata to improve placement. Evaluated on 566 target skills and 5,244 requests against more than 26,000 registry entries, it raised top-1 poisoned-skill placement by 13.6% relative to HotFlip and GCG, and most payloads evaded detection by SkillSpector and GPT-5.4-mini.
Related items
- InfoAnthropic sets price range of $70 to $78 in upcoming IPO as AI lab marches toward NasdaqSame vendor · CNBC Technology
- InfoChatGPT’s Teen Mode could deprive teenagers of a fundamental need | Robin KirmanSame vendor · The Guardian Technology
- InfoAnthropic sharpens AI coding and security capabilities with Mythos 5.2Same vendor · CSO Online
- InfoClosing the AI guidance gap in educationSame vendor · OpenAI Blog
- InfoAnthropic's Claude Fable 5.2 Beats GPT-6 Cyber in Multi-Stage Cyberattack BenchmarkSame vendor · The Hacker News