The BaseResearcharXiv
CoRedSkill: Stealthy Skill Composition Attacks via AST-Guided Injection
A preprint presents CoRedSkill, a red-teaming method that hides attack steps across cooperating agent skills. The authors report 98.0% attack success and a 3.3% detection rate on a benchmark of 150 cases.
Why it matters
The same thing, for different readers.
What it means for you
Add-on skills for AI agents may each look harmless while a combination does something malicious.
For lawmakers
Auditing agent skills one package at a time may not catch combined attacks.
For researchers
Introduces a 150-case benchmark with attack success, task completion and audit detection measures.
How the finding was reached
In our words, from the source. Weigh the finding by how it was made.
- What was done
- Benchmark of 150 cases covering 50 tasks and three attack objectives.
- What it found
- Per the abstract, 98.0% attack success, 95.3% task success, 3.3% detection rate and 90.7% joint success.
- What it does not show
- Abstract only; an offensive method evaluated by its authors.
- Status
- A preprint: not yet peer reviewed
The record
- Questions
- How is AI used in attacks, defence and war? · Are AI companies putting stronger safeguards into practice?
- People
- Qichen Zhao (Wrote it) · Shengfang Zhai (Wrote it) · Qingni Shen (Wrote it)
- What we read
- We have read only the description the publisher gives. No quotations until someone reads the source itself.
- Found by
- The Radar, run of October 15, 2026, via
arxiv-ai-safety-query(tier 1: the source’s own channel or an official record) - Cite this
- arXiv, “CoRedSkill: Stealthy Skill Composition Attacks via AST-Guided Injection”, October 14, 2026. Entry in the Ctrl AI Base, https://ctrlai.com/base/arxiv-2026-10-14-coredskill-skill-composition-attacks
Our notesLight lane: written from title, author and abstract excerpt only; not fetched. Authors listed are those named in triage.