SkillJack
“Results show that skill extraction substantially reduces attack detectability: in SkillX, safety detection drops from 98.5% for poisoned trajectories to 11.4% for extracted skills, while Anything2Skill shows a similar effect.”
The authors, in the abstract
Persistent Skill Backdoors in Self-Evolving Agents