SkillBloat: Token Amplification Attacks via Skill Injection in LLM Coding Agents
SkillBloat is a framework that systematically tests and refines malicious instructions injected into coding agents to cause 'token amplification.' The method screens diverse attack types, like verbose output or tool loops, and then uses an iterative LLM loop to rewrite the skill. Results show this technique can multiply token usage by up to 10x, proving a new economic threat distinct from traditional security poisoning.