{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:ECWFIHNPRIETOMGW2LBBR4YA3E","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"bc4453f5072b2df78ff77755ef7858a098f12f79664bc27add1681a357d0afeb","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-07-15T16:15:46Z","title_canon_sha256":"fc7d059b9a10345016310c78aca88e8f7bc046e4145753036463a0d7fb634e6a"},"schema_version":"1.0","source":{"id":"2607.13987","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2607.13987","created_at":"2026-07-16T01:23:18Z"},{"alias_kind":"arxiv_version","alias_value":"2607.13987v1","created_at":"2026-07-16T01:23:18Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2607.13987","created_at":"2026-07-16T01:23:18Z"},{"alias_kind":"pith_short_12","alias_value":"ECWFIHNPRIET","created_at":"2026-07-16T01:23:18Z"},{"alias_kind":"pith_short_16","alias_value":"ECWFIHNPRIETOMGW","created_at":"2026-07-16T01:23:18Z"},{"alias_kind":"pith_short_8","alias_value":"ECWFIHNP","created_at":"2026-07-16T01:23:18Z"}],"graph_snapshots":[{"event_id":"sha256:2dd67ae9f999b34705dfa536a0ef88a5c2e718833a7eca7c2fd751f638745059","target":"graph","created_at":"2026-07-16T01:23:18Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2607.13987/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Reusable skills are becoming a fundamental building block of Large Language Model (LLM) agents, enabling capabilities to be packaged, shared, and reused across diverse applications. However, existing security research primarily focuses on prompt injection and runtime execution, leaving security risks throughout the broader skill lifecycle largely unexplored. In this paper, we present SkillSec-Eval, a lifecycle-aware framework for systematically evaluating the security of reusable agent skills. We first characterize the skill lifecycle and develop a threat taxonomy spanning repository admission","authors_text":"Priyanka Tiwari, Sanket Badhe","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-07-15T16:15:46Z","title":"Agent Skill Security: Threat Models, Attacks, Defenses, and Evaluation"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2607.13987","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:89fec3a469877f875d167328ef3f7e517b193903080ff7757a98de50312b337e","target":"record","created_at":"2026-07-16T01:23:18Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"bc4453f5072b2df78ff77755ef7858a098f12f79664bc27add1681a357d0afeb","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-07-15T16:15:46Z","title_canon_sha256":"fc7d059b9a10345016310c78aca88e8f7bc046e4145753036463a0d7fb634e6a"},"schema_version":"1.0","source":{"id":"2607.13987","kind":"arxiv","version":1}},"canonical_sha256":"20ac541daf8a093730d6d2c218f300d92823a036fddd2dd49e94346c298235ea","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"20ac541daf8a093730d6d2c218f300d92823a036fddd2dd49e94346c298235ea","first_computed_at":"2026-07-16T01:23:18.092837Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-16T01:23:18.092837Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"Jkpu+XoDzxB9DCWO5UGFS57SKFDTKPdoYp1Fm2+H0EHVyb5UiOQnKfkjGZ8URe/YNGd73rVS9NIzx14CTYoJAg==","signature_status":"signed_v1","signed_at":"2026-07-16T01:23:18.093708Z","signed_message":"canonical_sha256_bytes"},"source_id":"2607.13987","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:89fec3a469877f875d167328ef3f7e517b193903080ff7757a98de50312b337e","sha256:2dd67ae9f999b34705dfa536a0ef88a5c2e718833a7eca7c2fd751f638745059"],"state_sha256":"117047e37bb48f141f0ab33e0c13ca2d0f5b5b0cbb69aac8c57419a2365d724f"}