Captured record
report:4125:titleHeadline captured
arXiv — Cryptography & Security (cs.CR) recorded this headline on Sep 3, 2026. No lawful structured evidence is available yet to explain the underlying event.
Intelligence reports
Loading the current evidence view. Navigation and account controls remain available.
Loading report content, references and extracted observables.
Brief status
Headline captured
Evidence records
1
Structured pivots
0
Publisher text
Available
Forensia structured brief
Only the source headline is captured. Forensia will not present a generic provenance summary as a threat brief.
Captured record
report:4125:titlearXiv — Cryptography & Security (cs.CR) recorded this headline on Sep 3, 2026. No lawful structured evidence is available yet to explain the underlying event.
What you can do now
source brief
source-authored · cleanedarXiv:2609.02035v1 Announce Type: new Abstract: Skill selection is a key stage in LLM-agent workflows, determining which installed skill should handle a user request. Existing attacks on this stage primarily rely on explicit prompt injection or instruction-level steering, which can expose recognizable manipulation signals. In this work, we identify a new implicit attack surface for skill selection: even when the user prompt and skill description appear benign in isolation, their semantic relationship can still be strategically shaped to favor an attacker-chosen skill. Based on this observation
Cleaned from source-provided descriptive text. This is not independent Forensia analysis. Open the original for the publisher's complete reporting.· sha256:c7640bcb825bf035…
No structured IOCs, malware families, threat actors or ATT&CK techniques were extracted from this source document.
evidence set
1 recordsGrouping means the records share event anchors. It does not prove that every publisher independently verified the claims.
rights & provenance
Coverage state measures available context, not whether every claim is true or independently corroborated. Unknown publication rights fail closed to metadata and the original source link.
Review source terms ↗where to go next