AgentWorm
“Results show a 63% aggregate attack success rate, sustained multi-hop propagation, and stark divergences in model security postures, highlighting that while execution-level filtering effectively mitigates dormant payloads, skill supply chains remain universally vulnerable.”
The authors, in the abstract
Self-Propagating Attacks Across LLM Agent Ecosystems