Preprint
Aug 2026
SkillBloat: Token Amplification Attacks via Skill Injection in LLM Coding Agents
Results show that skill ecosystems expose a practical resource-amplification attack surface that is orthogonal to existing security-oriented skill poisoning, and shows that iterative optimization provides additional benefit beyond initial attack-type selection.
Yuan-Jin Zheng, Jing-Bang Chen
· 0 citations