SkillPoison: Progressive Skill Poisoning via Successful Experiences
Self-improving LLM agents increasingly distill successful experiences into persistent, reusable skills. Existing skill attack methods corrupt this learning pipeline by injecting malicious triggers, behaviors, or false facts into individual experiences or extracted skills. However, such attacks are easily detected, and...
Li-Zhi Zhang, Xin He, Dian-Xuan Fu et al.
· 0 citations