{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,9]],"date-time":"2026-07-09T06:14:59Z","timestamp":1783577699952,"version":"3.55.0"},"reference-count":9,"publisher":"IEEE","license":[{"start":{"date-parts":[[2026,6,22]],"date-time":"2026-06-22T00:00:00Z","timestamp":1782086400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2026,6,22]],"date-time":"2026-06-22T00:00:00Z","timestamp":1782086400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/100000001","name":"National Science Foundation","doi-asserted-by":"publisher","id":[{"id":"10.13039\/100000001","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2026,6,22]]},"DOI":"10.1109\/dsn-w70714.2026.00025","type":"proceedings-article","created":{"date-parts":[[2026,7,8]],"date-time":"2026-07-08T19:42:00Z","timestamp":1783539720000},"page":"36-43","source":"Crossref","is-referenced-by-count":0,"title":["NinjaShell: Skill-Aware Defense Against Malicious Agentic Skills"],"prefix":"10.1109","author":[{"given":"Haddy","family":"Alchaer","sequence":"first","affiliation":[{"name":"Purdue University,Dept. of Electrical and Computer Engineering,West Lafayette,USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Joseph","family":"Ghanem","sequence":"additional","affiliation":[{"name":"Purdue University,Dept. of Electrical and Computer Engineering,West Lafayette,USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Saurabh","family":"Bagchi","sequence":"additional","affiliation":[{"name":"Purdue University,Dept. of Electrical and Computer Engineering,West Lafayette,USA"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1016\/j.jisa.2025.104324"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1145\/3705304"},{"key":"ref3","article-title":"OpenShell: Safe, private runtime for autonomous AI agents","year":"2026"},{"key":"ref4","article-title":"skills: CLI for the open agent skills ecosystem","year":"2026"},{"key":"ref5","article-title":"ClawHub: Skill directory for OpenClaw","year":"2025"},{"key":"ref6","article-title":"Gen launches Agent Trust Hub for safer agentic era","volume-title":"Press release","year":"2026"},{"key":"ref7","article-title":"ToxicSkills: Malicious AI agent skills supply chain compromise","volume-title":"Snyk Security Research","author":"Beurer-Kellner","year":"2026"},{"key":"ref8","article-title":"Socket: Secure your dependencies","year":"2024"},{"key":"ref9","article-title":"Snyk: Developer security platform","year":"2024"}],"event":{"name":"2026 56th Annual IEEE International Conference on Dependable Systems and Networks Workshops (DSN-W)","location":"Charlotte, NC, USA","start":{"date-parts":[[2026,6,22]]},"end":{"date-parts":[[2026,6,25]]}},"container-title":["2026 56th Annual IEEE International Conference on Dependable Systems and Networks Workshops (DSN-W)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/11594430\/11594448\/11594469.pdf?arnumber=11594469","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,7,9]],"date-time":"2026-07-09T05:29:14Z","timestamp":1783574954000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11594469\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,6,22]]},"references-count":9,"URL":"https:\/\/doi.org\/10.1109\/dsn-w70714.2026.00025","relation":{},"subject":[],"published":{"date-parts":[[2026,6,22]]}}}