SOURCE-LINKED INTELLIGENCE

Daydreaming: Stealing Hidden Agent Skills through Black-Box Task Interaction

arXiv · AI, language, vision and robotics · article · Aug 27, 2026 · UTC

Agent skills bundle instructions, reference data, and executable helpers that let a general agent perform specialized tasks. Hosted providers can keep these files secret while selling access to task results, making the skill itself a valuable target. Existing disclosure defenses can block requests that ask for the skill or reproduce its text, but they cannot block customers from submitting the ordinary tasks the service is built to complete. We present Daydreaming, an execution-only attack that steals a multi-file skill through black-box task interactions. The victim is never asked to reveal t

Read original source ↗ Open in workspace

recordType

paper

region

Global