Query-Only Backdoor Attacks on Self-Evolving Skills via Trajectory Poisoning
Agentic skills improve large language model (LLM) agents by encoding reusable procedures for complex tasks. However, manually authored skills often adapt poorly to long-horizon tasks and changing environments. To address the limitation, self-evolving skill systems have been developed to automatically construct and upda...