Exploiting LLM Agent Supply Chains via Payload-Less Skills

Researchers introduce a payload-less supply chain attack targeting autonomous coding environments, exploiting vulnerabilities in Large Language Models (LLMs) to achieve high success rates of confidentiality breaches and Remote Code Execution (RCE).