ActionGuard: Tool Call Authorization under Poisoned Skills
Results show that execution-boundary authorization grounded in trusted user intent and runtime evidence can restrict unauthorized Tool Calls induced by skill injection, while maintaining high benign-task completion.