SkillCODER: Towards Auditing and Attribution of Copyright Infringement in LLM Agent Skills

Summary

SkillCODER is a black-box, content-only method for auditing copyright and attributing buyers of LLM agent skills. It embeds a dormant, Artifact-Gated Capsule into a skill, with buyer-specific fingerprints encoded through Controlled-Vocabulary Error-Correcting Codes. Across three domains, six models and three agent frameworks, it reports 99.2% owner verification and 99.3% buyer Top-1 attribution accuracy.

Related items

• HighCVE-2026-125271 - AWS API MCP Server Security Policy Bypass via Incorrect Operation Name NormalizationSimilar attack · AWS Security Bulletins
• HighGHSA-ghwv-vrp2-2975: Cocos AI Intra-handshake attested TLS implementation is vulnerable to TOCTOU AttacksSimilar attack · GitHub Advisory Database
• MediumGHSA-5m6c-38r8-5w76: Dagu MCP DAG specification read bypasses path containment and workspace isolationSimilar attack · GitHub Advisory Database
• HighCVE-2026-123818: LMDeploy is a toolkit for compressing, deploying, and serving large language models. From 0.12.3 until 0.15.0…Similar attack · NVD/CVE Database
• HighGHSA-vvr2-h2jp-838m: Code Graph RAG: MCP paginated read_file path traversal / arbitrary file readSimilar attack · GitHub Advisory Database