Preprint Open access
Surviving the Router: Optimizing Skill Injections for Retrieval and Execution
AI agents increasingly rely on modular third-party "skills" that are dynamically selected by skill routers to execute complex tasks. While recent studies highlight the threat of prompt injections embedded in these skills, existing evaluations often assume settings where the malicious skill is already selected for execu …