Defense-as-Skill: Evolving Runtime Guard Skill for Skill-Augmented Agents
arXiv:2609.01487v2 Announce Type: replace-cross Abstract: Skill-augmented agents load reusable skills as persistent runtime context, improving task performance but also giving malicious skills a durable channel for steering future actions. Such skills may leak secrets, corrupt code, bypass approvals, or stage data for exfiltration only after a concrete user task and workspace state make the unsafe action appear useful. This makes pre-install vetting insufficient and calls for runtime, task-cond…