Daydreaming: Stealing Hidden Agent Skills through Black-Box Task Interaction
Daydreaming is presented, an execution-only attack that steals a multi-file skill through black-box task interactions and produces installable skills using a median of 32 victim calls per skill even with disclosure defenses enabled.