Daydreaming: Black-Box Extraction of Hidden Agent Skills
August 28, 2026
Daydreaming is an execution-only attack that reconstructs multi-file agent skills through adaptive, crafted task interactions. The method uses shadow agents to distinguish hidden behaviors without requiring direct disclosure or grading, allowing attackers to steal proprietary instructions and executable helpers from black-box service providers.
HOW THIS AFFECTS YOU
●
builderYou must account for skill extraction via task outputs, not just prompt injection.
●
policyThis highlights a new vector for intellectual property theft in agentic services.