pith. sign in
Pith Number

pith:DSGGYYAF

pith:2026:DSGGYYAFYHHQIOPX4CTPOERHTX
not attested not anchored not stored refs pending

"Do Not Mention This to the User": Detecting and Understanding Malicious Agent Skills

Gelei Deng, Jianting Ning, Leo Yu Zhang, Yanjun Zhang, Yi Liu, Yuekang Li, Zhihao Chen

arxiv:2602.06547 v3 · 2026-02-06 · cs.CR · cs.AI · cs.CL · cs.ET

Open paper page JSON Open Graph Bundle Merged state Verified badge What is a Pith Number?
Add to your LaTeX paper 
\usepackage{pith}
\pithnumber{DSGGYYAFYHHQIOPX4CTPOERHTX}

Prints a linked badge after your title and injects PDF metadata. Compiles on arXiv. Learn more · Embed verified badge

Record completeness

1 Bitcoin timestamp
2 Internet Archive
3 Author claim open · sign in to claim
4 Citations open
5 Replications open
✓ Portable graph bundle live · download bundle · merged state
The bundle contains the canonical record plus signed events. A mirror can host it anywhere and recompute the same current state with the deterministic merge algorithm.

Cited by

16 papers in Pith

Exploiting LLM Agent Supply Chains via Payload-less Skills
No Attack Required: Semantic Fuzzing for Specification Violations in Agent Skills
Do Skill Descriptions Tell the Truth? Detecting Undisclosed Security Behaviors in Code-Backed LLM Skills
Towards Secure Agent Skills: Architecture, Threat Taxonomy, and Security Analysis
Credential Leakage in LLM Agent Skills: A Large-Scale Empirical Study
Receipt and verification
First computed 2026-06-02T03:04:38.273225Z
Builder pith-number-builder-2026-05-17-v1
Signature Pith Ed25519 (pith-v1-2026-05) · public key
Schema pith-number/v1.0

Canonical hash

1c8c6c6005c1cf0439f7e0a6f712279df1124b5bdbaabd56cbfad40fb54a0a18

Aliases

arxiv: 2602.06547 · arxiv_version: 2602.06547v3 · doi: 10.48550/arxiv.2602.06547 · pith_short_12: DSGGYYAFYHHQ · pith_short_16: DSGGYYAFYHHQIOPX · pith_short_8: DSGGYYAF
Agent API
Resolver JSON Graph JSON Events JSON Schema Signing key
Verify this Pith Number yourself 
curl -sH 'Accept: application/ld+json' https://pith.science/pith/DSGGYYAFYHHQIOPX4CTPOERHTX \
  | jq -c '.canonical_record' \
  | python3 -c "import sys,json,hashlib; b=json.dumps(json.loads(sys.stdin.read()), sort_keys=True, separators=(',',':'), ensure_ascii=False).encode(); print(hashlib.sha256(b).hexdigest())"
# expect: 1c8c6c6005c1cf0439f7e0a6f712279df1124b5bdbaabd56cbfad40fb54a0a18
Canonical record JSON 
{
  "metadata": {
    "abstract_canon_sha256": "92f3dc5189db690874eccd59a73c41f2f811273e2890d522fe4bd41873b29aad",
    "cross_cats_sorted": [
      "cs.AI",
      "cs.CL",
      "cs.ET"
    ],
    "license": "http://creativecommons.org/licenses/by/4.0/",
    "primary_cat": "cs.CR",
    "submitted_at": "2026-02-06T09:52:27Z",
    "title_canon_sha256": "17489831ba85202367ff6a59f4fb66f42dca11eb93de5c23facded06b866f725"
  },
  "schema_version": "1.0",
  "source": {
    "id": "2602.06547",
    "kind": "arxiv",
    "version": 3
  }
}