Twitxy Saved

Yuting Ning

Verified account This account is verified. Learn more

@yuting_ning

PhD Student @osunlp | Prev: BS/MS @USTC, intern @Apple @nlp_usc @MSFTResearch
Columbus, OH nnnyt.github.io Joined August 2023
419 Following 290 Followers 145 Posts

Latest posts 5

Pinned post

Yuting Ning Verified account @yuting_ning
When you ask an agent to book a restaurant, spelling out every detail is tedious. You’d rather just say “Get me a table at my usual place tomorrow.”

A good personal agent should infer which restaurant from your history, and ask you for what only you know (e.g., the time and party size). It shouldn’t guess, and it shouldn’t quiz you about things it should already know.

Introducing iPrefBench, my internship work at Apple 🍎: a user-centric benchmark for personalized mobile use agents, with:

- 130 underspecified tasks across 26 iOS apps, grounded in a coherent persona with 3,051 past activity events
- Every missing detail is either inferable from history or obtainable only by asking the user, by construction
- Evaluation on both whether agents get the task right for the user and whether they only ask questions when necessary

🧵:
5 replies 19 reposts 69 likes 5.6K views View on X
Yuting Ning Verified account @yuting_ning
So excited that SkillHarm received an Outstanding Paper Award at #EMNLP2026! 🏆
Huge thanks to my co-lead @Zhehao_Zhang123, our advisors @hhsun1 @ysu_nlp and all collaborators for their guidance and support!🫶

And congrats to everyone at @osunlp on all three awards!
Huan Sun Verified account @hhsun1 Oct 27
Getting papers published probably won’t excite you anymore, but getting paper awards still do, especially THREE paper awards from #EMNLP2026 and a #NeurIPS2026 workshop on the same day @osunlp! Thrilled to share:

SkillHarm, led by @yuting_ning and @Zhehao_Zhang123, gets an Outstanding Paper Award at #EMNLP2026. I particularly like that SkillHarm introduces a new attack scenario, named Self-Mutating Poisoning (SMP), where an initially benign execution silently mutates persistent skill content that defers harm until a later reuse.

D3-Gym (co-led by @HananeNMoussa and @YifeiLiPKU) gets an Outstanding Paper Award at #EMNLP2026. D3-Gym has received a lot of interest from startups that aim to create scientific tasks and environments to train agents for scientific discovery. I particularly like that my students choose to stay with me rather than quitting Ph.D. to make big money! ;-)

AgentCL (led by @YihengShu) was selected for a Runner-up Paper Award at the #NeurIPS2026 Workshop on Towards Test-Time Continual Learning Agents (TTCL)! Check out our attempt to rigorously evaluate continual learning in language agents.

Congratulations to all co-authors and collaborators!

See our original posts for details:
View quoted post on X
1 replies 5 reposts 38 likes 1.6K views View on X
Yuting Ning Verified account @yuting_ning
Thanks to Rahul and the Amazon team for the amazing collaboration and support throughout the project! It has been a pleasure working with you all! 🙌
Rahul Gupta Verified account @rahul1987iit Oct 27
Our collaboration with OSU wins outstanding paper award at #EMNLP2026!!

The paper introduces, a benchmark for evaluating how vulnerable AI coding agents are to malicious "skill-based attacks". Where poisoned, reusable skill packages can compromise agents either immediately during a single task session or silently across sessions via self-mutating payloads.

Please see our paper here -- arxiv.org/html/2606.0254…

Huge shoutout to @yuting_ning, @Zhehao_Zhang123 and @hhsun1.
View quoted post on X
0 replies 0 reposts 11 likes 455 views View on X
Yuting Ning Verified account @yuting_ning
Check out SkillHarm at #EMNLP2026 ! 🇭🇺

Unfortunately, I couldn't make it to Budapest, but my amazing co-lead @Zhehao_Zhang123 will present it:
🗓️ Oct 27, 9:00–10:30 AM
📍 LLM Agents 5 oral session, Room F6

Come see how your agent skills can become a persistent attack surface!
Yuting Ning Verified account @yuting_ning Jun 10
🤖 Agents increasingly rely on skills to handle complex tasks with privileged trust, which makes a poisoned skill a dangerous attack surface. Worse, skills persist and get reused: one can look benign today, silently mutate itself, and attack tomorrow ⚠️

Introducing SkillHarm: Lifecycle-Aware Skill-Based Attacks via Automated Construction
• 2 attack scenarios across the skill-use lifecycle: Fixed-Payload Poisoning & Self-Mutating Poisoning
• 12 risks organized by the workflow component harmed: Data Pipeline, System Environment & Agent Autonomy Exploitation
• AutoSkillHarm: automatic attack construction with coding agents driven by natural-language harnesses

🚨 Frontier coding agents stay vulnerable with ASR up to 86.3% and current defenses don't hold.

🔥 Already 3.7K+ downloads on Hugging Face in the first week!

🧵:
View quoted post on X
0 replies 2 reposts 19 likes 669 views View on X