Encrypted Skills Can Become New Security Exploits If AI Agents Know How to Decipher
This work evaluates Caesar and layered variants across eight models and 139 injection-task pairs, separating instruction recovery from attack success, and highlights the risk of promoting decoded, untrusted content into actionable instructions.
Yan-Lun Chen, Pin-Yu Chen, Chia-Mu Yu
· 0 citations