arXiv cs.AI· Chenxu Zhang, Zhou Liu, Wu Xin, Wentao Zhang·· 14 小时前AI 评分39
SkillLifeBench：评测 AI 智能体技能全生命周期的安全性
SkillLifeBench: Benchmarking Security Across the Lifecycle of Agent Skills
AI 导读
SkillLifeBench 用 388 个配对场景评测智能体技能在实现、接口、运行时、组合与版本变更中的安全表现，覆盖 14 个模型。GPT-5.6-Sol 与 Sonnet 4.6 在运行时任务上均为 82.0%，但在生命周期任务上分别为 96.7% 和 56.7%。生命周期评测中任务成功率为 77.5%，联合成功率仅 65.2%，有 103 次运行在完成任务的同时达成了攻击目标。
正文 · 原文
Abstract:Web agents reuse skills whose stored code, selected version, and loaded implementation can diverge across tasks and updates. SkillLifeBench links these states to task outcomes in 388 paired scenarios spanning implementation, interface, runtime, composition, and version changes. We evaluate 14 models on two paired decision tracks: 89 runtime tasks and 60 autonomous lifecycle tasks spanning 12 templates derived from introduced cases. Lifecycle tasks allow agents to inspect, select, and reconfigure skills while completing verifiable user requests. Joint success requires task completion without the registered attack goal. GPT-5.6-Sol and Sonnet 4.6 both achieve 82.0% on runtime tasks, but reach 96.7% and 56.7% on lifecycle tasks. Across lifecycle evaluations, challenged task success is 77.5%, while joint success is 65.2%; 103 runs complete the task and the attack goal. Adding execution provenance in a matched recovery study raises utility joint success from 49.35% with logs and metadata to 65.58%. A deterministic execution-consistency rule reaches 64.94% with higher benign utility, while full restoration reaches 69.48%. Lifecycle tasks distinguish models with similar runtime scores, and execution evidence improves recovery.
| Comments: | 12 pages, 6 figures. Code and benchmark: this https URL |
| Subjects: | Machine Learning (cs.LG); Artificial Intelligence (cs.AI) |
| Cite as: | arXiv:2610.35215 [cs.LG] |
| (or arXiv:2610.35215v1 [cs.LG] for this version) | |
| https://doi.org/10.48550/arXiv.2610.35215 arXiv-issued DOI via DataCite (pending registration) |
Submission history
From: Chenxu Zhang [view email]
[v1]
Mon, 26 Oct 2026 11:07:04 UTC (1,084 KB)
来源：arXiv cs.AI · arxiv.org