{"slug": "skill-cascading-attacks-evade-agent-scanners-across-213-test-cases-on-claude", "title": "Skill cascading attacks evade agent scanners across 213 test cases on Claude Code, Codex", "summary": "A study of 213 validated test cases found that malicious behavior split across multiple individually benign agent skills can evade per-skill scanners and runtime monitors on systems including OpenClaw, Claude Code, and Codex, emerging only when the skills execute together. The research, posted to arXiv, indicates that component-level review is insufficient for agents that load third-party or modular skills, and that policy and testing must model cross-skill data flow, ordering, and combined effects before skills are allowed to compose in production.", "body_md": "[arXiv](https://arxiv.org/abs/2609.30383)\n\n### Skill cascading attacks evade agent scanners across 213 test cases on Claude Code, Codex\n\nWhich summary reads better? Pick one — models revealed after.Both summaries are AI-generated.\n\n213 validated test cases show that malicious behavior can be split across multiple “benign” agent skills and reliably emerge only when the skills execute together, bypassing per-skill scanners and runtime monitors on systems including OpenClaw, Claude Code, and Codex. If you ship agents that load third-party or modular skills, component review is insufficient: you need policy and testing that model cross-skill data flow, ordering, and combined effects before allowing skills to compose in production.\n\nMistral Large quota or rate limit — check usage and plan. Original headline: Stealth Apart, Harm Together: Skill Cascading Attacks on Skill-Based Agent Systems", "url": "https://wpnews.pro/news/skill-cascading-attacks-evade-agent-scanners-across-213-test-cases-on-claude", "canonical_source": "https://www.snipvote.com/story/cmukxayia0002hi85akdfldy9", "published_at": "2026-09-28 07:47:45.621785+00:00", "updated_at": "2026-09-28 07:47:47.539549+00:00", "lang": "en", "topics": ["ai-agents", "ai-safety", "ai-research", "large-language-models", "ai-tools"], "entities": ["arXiv", "OpenClaw", "Claude Code", "Codex", "Mistral Large"], "also_reported_by": [], "alternates": {"html": "https://wpnews.pro/news/skill-cascading-attacks-evade-agent-scanners-across-213-test-cases-on-claude", "markdown": "https://wpnews.pro/news/skill-cascading-attacks-evade-agent-scanners-across-213-test-cases-on-claude.md", "text": "https://wpnews.pro/news/skill-cascading-attacks-evade-agent-scanners-across-213-test-cases-on-claude.txt", "jsonld": "https://wpnews.pro/news/skill-cascading-attacks-evade-agent-scanners-across-213-test-cases-on-claude.jsonld"}}