<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/"><channel><title>Skill生态 on MessageDaily</title><link>https://inkeast.github.io/MessageDaily/tags/skill%E7%94%9F%E6%80%81/</link><description>Recent content in Skill生态 on MessageDaily</description><generator>Hugo</generator><language>zh-cn</language><lastBuildDate>Sat, 31 Oct 2026 00:00:00 +0000</lastBuildDate><atom:link href="https://inkeast.github.io/MessageDaily/tags/skill%E7%94%9F%E6%80%81/index.xml" rel="self" type="application/rss+xml"/><item><title>Agent Skill 安全四重奏：从预训练投毒到复合漏洞扫描的攻击面全景</title><link>https://inkeast.github.io/MessageDaily/posts/2026-10-31-agent-skill-security-quartet/</link><pubDate>Sat, 31 Oct 2026 00:00:00 +0000</pubDate><guid>https://inkeast.github.io/MessageDaily/posts/2026-10-31-agent-skill-security-quartet/</guid><description>精读 2026 年 10 月底同期出现的四篇 Agent Skill 安全论文：预训练投毒植入 CLI agent 后门（ASR 92.7%）、SKILL.md 越狱注入（ASR 0.5% 到 45%）、153 万 skill 中 13.3% 含监督放松指令、复合漏洞扫描器 89.8% 实测精度，拼出预训练层、分发层、指令层、组合层四层攻击面全景。</description></item></channel></rss>