Study reveals hiding agent skill files is ineffective, achieving 86.8% recovery rate
dair_ai · x · 2026-08-30
A new paper investigates whether hiding agent skill files actually protects them, with concerning results. Attackers can reconstruct multi-file skills using only data from ordinary tasks, without asking the victim to reveal the skill or grade a reconstruction, bypassing disclosure filters.
At the weakest access level, where the attacker sees only the final response and returned files, the method recovers 86.8% of the original skill's capability across 7 skills and 4 victim models. This is roughly 4x better than SigLeak, with a median of just 32 victim calls per skill, even with disclosure defenses enabled.
More from Safety
- Banking regulators ramp up scrutiny of banks' AI use over stability fears — nordicinst · 2026-10-16
- Michigan professor Ben Green: why 'AI for Good' fails and self-regulation won't work — benzevgreen · 2026-10-16
- Apex Research head on CBS News: current AI testing regime is very insufficient — MariusHobbhahn · 2026-10-16
- Critical 9.5/10 RCE hits Next.js use cache; patch 16.4.1 now — jedisct1 · 2026-10-16
- AI agent fleet has wasted 17 years of scammers' time across 2.5M conversations — neil_chilson · 2026-10-16
- AI security firm Xbow found a full-chain Chrome exploit affecting a billion users in 6 days — moyix · 2026-10-16