osunlp/SkillHarm

SkillHarm Lifecycle-Aware Skill-Based Attacks via Automated Construction 📄 Paper · 🌐 Project Page · 💻 GitHub · 🤗 Data Agent skills occupy a privileged position in the agent workflow — agents are expected to implicitly follow and execute them — which makes third-party skills a vulnerable supply-chain attack surface. SkillHarm is a benchmark of skill-based attacks across the skill-use lifecycle, paired with a systematic taxonomy of 12 skill-relevant risks. Every attack is… See the full description on the dataset page: https://huggingface.co/datasets/osunlp/SkillHarm.

<iframe src="https://silytics.si/embed/item/b2828992-1ab1-436f-9caa-55105fba164e" width="420" height="190" style="border:0" loading="lazy" title="Silytics entry"></iframe>

Silytics shows public metadata from Hugging Face and links to the original. Information may be incomplete or out of date. Last refreshed 16 October 2026. Licenses and terms of the original apply to the work itself. Not financial, legal or professional advice.