Paper Citation Record · LEDGER

ColluSkill: Adversarial Cross-Skill Composition for Evading Agent Skill Scanners

As of 17 August 2026, this Paper Citation Record lists 30 of 30 outbound references and 0 inbound Pith citation observations for arXiv:2608.09732.

A citation records a reference. It does not transfer a finding from one paper to another.

pith.paper-citation-record.v1
2608.09732 v1

Coverage vector

measured 30 of 30 reference resolution

Typed states for the displayed outbound observations.

Source: paper_references, paper_reference_links, observed 2026-08-11T11:52:16.054217Z

measured 30 of 30 standing notices

One-hop event checks from named stored sources.

Source: scholarly_work_events, retraction_status_cache, observed 2026-08-16T06:30:59.297886+00:00

measured 0 of 0 inbound itemization

Pith citing papers itemized under the disclosed page cap.

Source: paper_references, paper_reference_links

measured 0 of 1 external citation measurements

A source-named dated measurement, never combined with another source.

Source: cited_works

Reference resolution

30 of 30 outbound references displayed

verified exact1
verified fuzzy8
unresolved21
parse uncertain0
malformed identifier0
metadata mismatch0

External citation measurements

No source-named external measurement is stored.

Outbound references

Observation a5ec23c7-6eb2-44ae-a58a-67c402d35af1 · outbound

This paper cites https://github.com/cisco-ai-defense/skill- scanner.

ColluSkill: Adversarial Cross-Skill Composition for Evading Agent Skill Scanners https://github.com/cisco-ai-defense/skill- scanner

Reference 2

Resolution: verified fuzzy; raw_fallback, observed 2026-08-11T11:52:16.842229Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.

Observation d8f620c1-f2b8-4a49-8661-018891b558c1 · outbound

This paper cites Elias, N.

ColluSkill: Adversarial Cross-Skill Composition for Evading Agent Skill Scanners Elias, N

Reference 3

Resolution: verified fuzzy; raw_fallback, observed 2026-08-11T11:52:16.830348Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.

Observation a84ad127-363c-46eb-8054-ac688db89ee7 · outbound

This paper cites SkillTrojan: Backdoor Attacks on Skill-Based Agent Systems.

ColluSkill: Adversarial Cross-Skill Composition for Evading Agent Skill Scanners SkillTrojan: Backdoor Attacks on Skill-Based Agent Systems

Reference 4

Resolution: unresolved; no resolver link, observed 2026-08-11T11:52:15.926650Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 17c0b5a3-01dc-4547-840a-04e90512f218 · outbound

This paper cites Poise: Position-Aware One-Instruction Skill Injection for Silent Execution on LLM Agents.

ColluSkill: Adversarial Cross-Skill Composition for Evading Agent Skill Scanners Poise: Position-Aware One-Instruction Skill Injection for Silent Execution on LLM Agents

Reference 5

Resolution: unresolved; no resolver link, observed 2026-08-11T11:52:15.931648Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation b4c5853e-dcbd-4809-a1a3-171a08c7b522 · outbound

This paper cites InInternational Conference on Learning Representations, volume 2026, 70802–70832.

ColluSkill: Adversarial Cross-Skill Composition for Evading Agent Skill Scanners InInternational Conference on Learning Representations, volume 2026, 70802–70832

Reference 6

Resolution: verified fuzzy; raw_fallback, observed 2026-08-11T11:52:16.818064Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.

Observation 1e2f312d-64df-4463-968a-8a54e21d071d · outbound

This paper cites Cloak and Detonate: Scanner Evasion and Dynamic Detection of Agent Skill Malware.

ColluSkill: Adversarial Cross-Skill Composition for Evading Agent Skill Scanners Cloak and Detonate: Scanner Evasion and Dynamic Detection of Agent Skill Malware

Reference 7

Resolution: unresolved; no resolver link, observed 2026-08-11T11:52:15.941539Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 685ef0c0-4ba5-4c58-8f65-037859c01ff2 · outbound

This paper cites Li, H.; Mu, C.; Chen, J.; Ren, S.; Cui, Z.; Zhang, Y.; Bai, L.;andHu,S.2026a.

ColluSkill: Adversarial Cross-Skill Composition for Evading Agent Skill Scanners Li, H.; Mu, C.; Chen, J.; Ren, S.; Cui, Z.; Zhang, Y.; Bai, L.;andHu,S.2026a

Reference 9

Resolution: unresolved; no resolver link, observed 2026-08-11T11:52:15.952168Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 7fe202df-2100-406e-b2d1-3e5599abe54c · outbound

This paper cites Li, X.; Chen, W.; Liu, Y.; Zheng, S.; Chen, X.; He, Y.; Li, Y.; You, B.; Shen, H.; Sun, J.; et al.

ColluSkill: Adversarial Cross-Skill Composition for Evading Agent Skill Scanners Li, X.; Chen, W.; Liu, Y.; Zheng, S.; Chen, X.; He, Y.; Li, Y.; You, B.; Shen, H.; Sun, J.; et al

Reference 10

Resolution: unresolved; no resolver link, observed 2026-08-11T11:52:15.957540Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 2233747f-7d87-4dca-9d0d-6c7f4573d3f7 · outbound

This paper cites Liu, B.; Li, X.; Zhang, J.; Wang, J.; He, T.; Hong, S.; Liu, H.; Zhang, S.; Song, K.; Zhu, K.; et al.

ColluSkill: Adversarial Cross-Skill Composition for Evading Agent Skill Scanners Liu, B.; Li, X.; Zhang, J.; Wang, J.; He, T.; Hong, S.; Liu, H.; Zhang, S.; Song, K.; Zhu, K.; et al

Reference 11

Resolution: unresolved; no resolver link, observed 2026-08-11T11:52:15.962167Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 3d3ef1a4-a711-498f-b8d0-9b27cce58b14 · outbound

This paper cites https://openai.com/ index/gpt-5-5-system-card/.

ColluSkill: Adversarial Cross-Skill Composition for Evading Agent Skill Scanners https://openai.com/ index/gpt-5-5-system-card/

Reference 13

Resolution: verified fuzzy; raw_fallback, observed 2026-08-11T11:52:16.805077Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.

Observation 490e881f-f412-4075-b28f-aea9627533f6 · outbound

This paper cites SkillOps: Managing LLM Agent Skill Libraries as Self-Maintaining Software Ecosystems.

ColluSkill: Adversarial Cross-Skill Composition for Evading Agent Skill Scanners SkillOps: Managing LLM Agent Skill Libraries as Self-Maintaining Software Ecosystems

Reference 14

Resolution: unresolved; no resolver link, observed 2026-08-11T11:52:15.976573Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 218a005c-1d44-457f-8f55-cbe463d092f8 · outbound

This paper cites Virus- Total Blog.

ColluSkill: Adversarial Cross-Skill Composition for Evading Agent Skill Scanners Virus- Total Blog

Reference 15

Resolution: verified fuzzy; raw_fallback, observed 2026-08-11T11:52:16.792555Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.

Observation defafd9e-5fb5-4630-b76a-8355e7aa516f · outbound

This paper cites InInternational Conference on Learning Representations, volume 2024, 27031–27098.

ColluSkill: Adversarial Cross-Skill Composition for Evading Agent Skill Scanners InInternational Conference on Learning Representations, volume 2024, 27031–27098

Reference 16

Resolution: verified fuzzy; raw_fallback, observed 2026-08-11T11:52:16.780731Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.

Observation db00f50f-2d80-428e-bf9f-1a5adc5bf3a0 · outbound

This paper cites Skilldex: A Package Manager and Registry for Agent Skill Packages with Hierarchical Scope-Based Distribution.

ColluSkill: Adversarial Cross-Skill Composition for Evading Agent Skill Scanners Skilldex: A Package Manager and Registry for Agent Skill Packages with Hierarchical Scope-Based Distribution

Reference 17

Resolution: unresolved; no resolver link, observed 2026-08-11T11:52:15.990444Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 2524a186-ecfa-4244-886b-9a9ca9d37988 · outbound

This paper cites Schmotz, D.; Beurer-Kellner, L.; Abdelnabi, S.; and An- driushchenko, M.

ColluSkill: Adversarial Cross-Skill Composition for Evading Agent Skill Scanners Schmotz, D.; Beurer-Kellner, L.; Abdelnabi, S.; and An- driushchenko, M

Reference 18

Resolution: unresolved; no resolver link, observed 2026-08-11T11:52:15.995755Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 970c4b2a-d8aa-4c1a-8ded-34e480f03bf1 · outbound

This paper cites Skill-Inject: Measuring Agent Vulnerability to Skill File Attacks.

ColluSkill: Adversarial Cross-Skill Composition for Evading Agent Skill Scanners Skill-Inject: Measuring Agent Vulnerability to Skill File Attacks

Reference 19

Resolution: unresolved; no resolver link, observed 2026-08-11T11:52:16.000761Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 5fcb5788-cbd0-46b3-b17b-8fbdc3efd156 · outbound

This paper cites https://github.com/snyk/ agent-scan.

ColluSkill: Adversarial Cross-Skill Composition for Evading Agent Skill Scanners https://github.com/snyk/ agent-scan

Reference 20

Resolution: verified fuzzy; raw_fallback, observed 2026-08-11T11:52:16.768874Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.

Observation 286603c5-d350-47ff-8b1f-24b514b60fac · outbound

This paper cites BadSkill: Backdoor Attacks on Agent Skills via Model-in-Skill Poisoning.

ColluSkill: Adversarial Cross-Skill Composition for Evading Agent Skill Scanners BadSkill: Backdoor Attacks on Agent Skills via Model-in-Skill Poisoning

Reference 21

Resolution: unresolved; no resolver link, observed 2026-08-11T11:52:16.011829Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 64dc53b1-c656-4c46-954d-79b82984e59f · outbound

This paper cites SkillX: Automatically Constructing Skill Knowledge Bases for Agents.

ColluSkill: Adversarial Cross-Skill Composition for Evading Agent Skill Scanners SkillX: Automatically Constructing Skill Knowledge Bases for Agents

Reference 22

Resolution: unresolved; no resolver link, observed 2026-08-11T11:52:16.016586Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 9099e7f1-0f7a-490d-9b0a-6692033150c7 · outbound

This paper cites Xu, A.; Lin, B.; Xue, B.; Wang, B.; Xu, B.; Wu, B.; Zhang, B.; Lin, C.; Dong, C.; Ling, C.; et al.

ColluSkill: Adversarial Cross-Skill Composition for Evading Agent Skill Scanners Xu, A.; Lin, B.; Xue, B.; Wang, B.; Xu, B.; Wu, B.; Zhang, B.; Lin, C.; Dong, C.; Ling, C.; et al

Reference 24

Resolution: verified exact; raw_fallback, observed 2026-08-11T11:52:16.322542Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.

Observation c6650ac5-2735-4359-82b6-8604928c86b2 · outbound

This paper cites arXiv preprint arXiv:2606.19348.

ColluSkill: Adversarial Cross-Skill Composition for Evading Agent Skill Scanners arXiv preprint arXiv:2606.19348

Reference 25

Resolution: unresolved; no resolver link, observed 2026-08-11T11:52:16.031867Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 04935c5b-4b7f-4cef-9a0d-cc7c9d9ddfc6 · outbound

This paper cites Agent Skills for Large Language Models: Architecture, Acquisition, Security, and the Path Forward.

ColluSkill: Adversarial Cross-Skill Composition for Evading Agent Skill Scanners Agent Skills for Large Language Models: Architecture, Acquisition, Security, and the Path Forward

Reference 26

Resolution: unresolved; no resolver link, observed 2026-08-11T11:52:16.036838Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 9885e966-992d-4fbc-a3f1-1613f4b15549 · outbound

This paper cites an unresolved cited work.

ColluSkill: Adversarial Cross-Skill Composition for Evading Agent Skill Scanners Unresolved cited work

Reference 28

Resolution: unresolved; no resolver link, observed 2026-08-11T11:52:16.045896Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 631ab36d-dc18-4afd-8bdf-20d93885a33e · outbound

This paper cites https: //z.ai/blog/glm-5.2.

ColluSkill: Adversarial Cross-Skill Composition for Evading Agent Skill Scanners https: //z.ai/blog/glm-5.2

Reference 29

Resolution: verified fuzzy; raw_fallback, observed 2026-08-11T11:52:16.755966Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.

Observation 27c01478-04f8-4f73-8eb8-7344a5188e02 · outbound

This paper cites SkillWeaver: Web Agents can Self-Improve by Discovering and Honing Skills.

ColluSkill: Adversarial Cross-Skill Composition for Evading Agent Skill Scanners SkillWeaver: Web Agents can Self-Improve by Discovering and Honing Skills

Reference 30

Resolution: unresolved; no resolver link, observed 2026-08-11T11:52:16.054217Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation a9dfdba6-bbc8-4df9-ba7e-a489e0addd63 · outbound

This paper cites ReAct: Synergizing Reasoning and Acting in Language Models.

ColluSkill: Adversarial Cross-Skill Composition for Evading Agent Skill Scanners ReAct: Synergizing Reasoning and Acting in Language Models

Reference 2022

Resolution: unresolved; no resolver link, observed 2026-08-11T11:52:16.041320Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 96cc4253-bc42-4edc-8888-e30c330ff60e · outbound

This paper cites Voyager: An Open-Ended Embodied Agent with Large Language Models.

ColluSkill: Adversarial Cross-Skill Composition for Evading Agent Skill Scanners Voyager: An Open-Ended Embodied Agent with Large Language Models

Reference 2023

Resolution: unresolved; no resolver link, observed 2026-08-11T11:52:16.022399Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 56995e29-896a-454b-8308-91998213f5b1 · outbound

This paper cites Improved Techniques for Optimization-Based Jailbreaking on Large Language Models.

ColluSkill: Adversarial Cross-Skill Composition for Evading Agent Skill Scanners Improved Techniques for Optimization-Based Jailbreaking on Large Language Models

Reference 2024

Resolution: unresolved; no resolver link, observed 2026-08-11T11:52:15.946807Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation bd8878c7-0f3a-46a4-82a0-91324dfcb609 · outbound

This paper cites Advances and Challenges in Foundation Agents: From Brain-Inspired Intelligence to Evolutionary, Collaborative, and Safe Systems.

ColluSkill: Adversarial Cross-Skill Composition for Evading Agent Skill Scanners Advances and Challenges in Foundation Agents: From Brain-Inspired Intelligence to Evolutionary, Collaborative, and Safe Systems

Reference 2025

Resolution: unresolved; no resolver link, observed 2026-08-11T11:52:15.967077Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation bd4e4399-af3e-4b85-9657-72d139a677c4 · outbound

This paper cites Technical Report: Exploring the Emerging Threats of the Agent Skill Ecosystem.

ColluSkill: Adversarial Cross-Skill Composition for Evading Agent Skill Scanners Technical Report: Exploring the Emerging Threats of the Agent Skill Ecosystem

Reference 2026

Resolution: unresolved; no resolver link, observed 2026-08-11T11:52:15.910115Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Pith citing papers

No inbound Pith citation observations are available.