A preprint links SkillShield to lower observed attack and malware-generation scores in coding-agent benchmarks, while live deployment remains untested.