Stealth Apart, Harm Together: paper introduces skill-cascading attacks on skill-based agents
The paper defines "skill cascading" attacks, where a malicious objective is split across multiple otherwise-benign skills so their combined execution produces harmful outcomes. The authors release SkillCascade, an automated red-teaming framework, and SkillCascade-Bench (213 validated cascading test cases), and show cascades can induce harms across representative agents (e.g., OpenClaw, Claude Code, Codex) and LLM backbones while evading per-skill scanners and runtime monitors.