Research on Arsh Imtiaz https://arshimtiaz.github.io/research/ Recent content in Research on Arsh Imtiaz Hugo en Silent Exfiltration via Malicious Skills in LLM Agents: Supply Chain Risk for Developers https://arshimtiaz.github.io/research/agent-supply-chain-silent-exfil/ Sun, 22 Feb 2026 00:00:00 +0000 https://arshimtiaz.github.io/research/agent-supply-chain-silent-exfil/ A proof-of-concept attack where a seemingly legitimate skill for ‘code search’ silently exfiltrates a repository when wired into an LLM agent, illustrating supply chain risks in agent skills and tools.