[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"branding":3,"analytics":7,"article-safe-ai-skills-combine-into-unsafe-attack-chains":10,"sections":35},{"siteName":4,"siteTagline":5,"publisherName":4,"contactEmail":6},"The Revision","Tech news, decoded.","editor@therevision.news",{"gaMeasurementId":8,"adsenseClientId":9},"G-ZW2MV82GYR","ca-pub-8533917693782264",{"article":11},{"id":12,"slug":13,"title":14,"dek":15,"body_md":16,"tags_json":17,"published_at":18,"created_at":19,"updated_at":20,"status":21,"review_note":22,"review_notes":23,"image_url":22,"persona_id":22,"persona_name":22,"section":24,"tags":25,"sources":30,"feedback":34,"feedback_at":22,"cost_usd":34,"total_tokens":34},5440,"safe-ai-skills-combine-into-unsafe-attack-chains","Safe AI Skills Combine Into Unsafe Attack Chains","A new study shows individually approved AI agent skills can combine into dangerous attack chains that today's marketplace scanners barely catch.","Individually safe AI agent skills can still be chained into dangerous attacks, a new study finds.\n\nResearchers behind a paper called CompoSkill tested how AI agent marketplaces certify skills, the modular plug-ins that let autonomous agents complete multi-step tasks. Today's scanners check each skill in isolation and clear the whole marketplace if every skill passes individually. The team built two types of attackers: a white-box one that already knows which skills a victim has installed, and a black-box one that only knows a target's role and has to hunt for risky combinations itself by mapping how skills' inputs, outputs, and side effects connect. Tested against a new 1,140-record benchmark spanning five threat types and six professional workflows on the OpenClaw and Nanobot agent platforms, both attackers succeeded most of the time, forming risky chains in up to 83.3% of white-box attempts and 80.6% of black-box attempts.\n\nThis matters because it shows \"every skill passed the scanner\" is not the same as \"the marketplace is safe.\" Risk lives in how skills connect to each other, not just in what each one does alone, so certifying skills one at a time will keep missing danger that only shows up in combination. The researchers also found a useful limit: a well-placed bridge skill boosts an attack's success, but success rates drop once a chain runs past three skills, a pattern that could help defenders prioritize what to monitor.\n\nThis is the app-store security problem again, except now the apps can quietly hand each other your data mid-task, and nobody who cleared one app individually is watching for that handoff.","[\"ai-agents\",\"ai-security\",\"llm-security\",\"supply-chain\"]","2026-08-18T04:00:00.000Z","2026-08-18T20:19:18.814Z","2026-08-18T20:19:30.686Z","published",null,[],"security",[26,27,28,29],"ai-agents","ai-security","llm-security","supply-chain",[31],{"name":32,"url":33},"arXiv cs.AI","https:\u002F\u002Farxiv.org\u002Fabs\u002F2608.16246",0,{"sections":36},[37,42,45,50,55,60,65,70,75,79,84,89,94,99],{"name":38,"slug":39,"count":40,"latest_published_at":41},"AI","ai",3293,"2026-08-20T04:00:00.000Z",{"name":43,"slug":24,"count":44,"latest_published_at":41},"Security",435,{"name":46,"slug":47,"count":48,"latest_published_at":49},"Policy","policy",210,"2026-08-19T09:32:27.000Z",{"name":51,"slug":52,"count":53,"latest_published_at":54},"Deals","deals",179,"2026-06-29T20:02:07.000Z",{"name":56,"slug":57,"count":58,"latest_published_at":59},"Hardware","hardware",140,"2026-08-19T18:25:42.000Z",{"name":61,"slug":62,"count":63,"latest_published_at":64},"Consumer Tech","consumer-tech",95,"2026-08-18T16:05:00.000Z",{"name":66,"slug":67,"count":68,"latest_published_at":69},"Science","science",90,"2026-08-19T18:41:02.000Z",{"name":71,"slug":72,"count":73,"latest_published_at":74},"Software","software",73,"2026-08-18T07:51:50.000Z",{"name":76,"slug":77,"count":78,"latest_published_at":18},"Dev Tools","dev-tools",69,{"name":80,"slug":81,"count":82,"latest_published_at":83},"Startups","startups",47,"2026-08-19T19:13:46.000Z",{"name":85,"slug":86,"count":87,"latest_published_at":88},"Gaming","gaming",41,"2026-07-09T04:00:00.000Z",{"name":90,"slug":91,"count":92,"latest_published_at":93},"General","general",33,"2026-08-18T22:18:13.000Z",{"name":95,"slug":96,"count":97,"latest_published_at":98},"Reviews","reviews",20,"2026-06-24T12:00:01.000Z",{"name":100,"slug":101,"count":102,"latest_published_at":103},"How-To","how-to",6,"2026-06-16T09:00:00.000Z"]