Chongqing University of Posts and Telecommunications

VRATF moves the comparison in retrieval-augmented forecasting from raw time series to denoised trend line charts: FFT low-pass filtering extracts the low-frequency trend, which is rendered as a 224×224 image and encoded by a frozen CLIP ViT-B/32 to build the retrieval database, with top-K neighbors selected by cosine similarity and aggregated by Gaussian-kernel weights. The retrieval forecast is fused at the prediction level with a DLinear base forecast through one learnable scalar. Across six multivariate benchmarks, VRATF reaches the lowest average MSE on four, with 0.340 on ETTh2 against 0.358 for the next-best RAFT, a 5.0% improvement.

VRATF moves the comparison in retrieval-augmented forecasting from raw time series to denoised trend line charts: FFT low-pass filtering extracts the low-frequency trend, which is rendered as a 224×224 image and encoded by a frozen CLIP ViT-B/32 to build the retrieval database, with top-K neighbors selected by cosine similarity and aggregated by Gaussian-kernel weights. The retrieval forecast is fused at the prediction level with a DLinear base forecast through one learnable scalar. Across six multivariate benchmarks, VRATF reaches the lowest average MSE on four, with 0.340 on ETTh2 against 0.358 for the next-best RAFT, a 5.0% improvement.

SkillDRE is a fully automated framework that, given a benign task and its associated skills, autonomously constructs and validates a task-conditioned malicious objective and a verifiable judge rule, then holds both fixed while alternating scanner-guided evolution with runtime-defense-guided refinement, forming a closed loop between the pre-execution and runtime stages; on SkillsBench across four victim models it achieves an average attack success rate of 45.28%, exceeding the strongest baseline by 40.3%, while its final submitted skills receive no SkillScan findings and largely preserve benign-task performance.

SkillDRE is a fully automated framework that, given a benign task and its associated skills, autonomously constructs and validates a task-conditioned malicious objective and a verifiable judge rule, then holds both fixed while alternating scanner-guided evolution with runtime-defense-guided refinement, forming a closed loop between the pre-execution and runtime stages; on SkillsBench across four victim models it achieves an average attack success rate of 45.28%, exceeding the strongest baseline by 40.3%, while its final submitted skills receive no SkillScan findings and largely preserve benign-task performance.