CoChat
Sign Up
PreprintCited by 6Natural Language Processing TechniquesArtificial Intelligence ApplicationsAI-based Problem Solving and Planning

Agent Skills for Large Language Models: Architecture, Acquisition, Security, and the Path Forward

Open access
Xu, Renjun, Yan, Yang·2026·arXiv
DOI 10.48550/arxiv.2602.12430arXiv 2602.12430
Open this paper in CoChat — free accountOpen PDF

Abstract

The transition from monolithic language models to modular, skill-equipped agents marks a defining shift in how large language models (LLMs) are deployed in practice. Rather than encoding all procedural knowledge within model weights, agent skills -- composable packages of instructions, code, and resources that agents load on demand -- enable dynamic capability extension without retraining. It is formalized in a paradigm of progressive disclosure, portable skill definitions, and integration with the Model Context Protocol (MCP). This survey provides a comprehensive treatment of the agent skills landscape, as it has rapidly evolved during the last few months. We organize the field along four axes: (i) architectural foundations, examining the SKILL$.$md specification, progressive context loading, and the complementary roles of skills and MCP; (ii) skill acquisition, covering reinforcement learning with skill libraries, autonomous skill discovery (SEAgent), and compositional skill synthesis; (iii) deployment at scale, including the computer-use agent (CUA) stack, GUI grounding advances, and benchmark progress on OSWorld and SWE-bench; and (iv) security, where recent empirical analyses reveal that 26.1% of community-contributed skills contain vulnerabilities, motivating our proposed Skill Trust and Lifecycle Governance Framework -- a four-tier, gate-based permission model that maps skill provenance to graduated deployment capabilities. We identify seven open challenges -- from cross-platform skill portability to capability-based permission models -- and propose a research agenda for realizing trustworthy, self-improving skill ecosystems. Unlike prior surveys that broadly cover LLM agents or tool use, this work focuses specifically on the emerging skill abstraction layer and its implications for the next generation of agentic systems. Project repo: https://github.com/scienceaix/agentskills

The claims and statistics of this paper haven’t been checked yet.

Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.

A few free checks a day · papers already verified open instantly · results are public

Integrity signals

Registry

DataCite · 10.48550/arxiv.2602.12430

Cites

Statistics

Claims the paper makes

The claims and statistics of this paper haven’t been checked yet.

Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.

A few free checks a day · papers already verified open instantly · results are public

Claims other papers make about this one

Each is checked against this paper’s own text: does it say what the citing paper says it does?

  • Neither skill survey (Jiang et al., 2026; Xu & Yan, 2026) cites any memory system.

    “Neither skill survey (Jiang et al., 2026; Xu & Yan, 2026) cites any memory system, and only one memory survey (Yang et al., 2026a) cites any skill work (only Voyager).”

    From Experience Compression Spectrum: Unifying Memory, Skills, and Rules in LLM Agents (2026) · cites this paper as Xu & Yan, 2026

    Section 4.3, “Autonomous Skill Discovery” (page unavailable), cites SEAgent [28] and describes its “continuously updated software guidebook memory.” That is contrary to the claim that Xu and Yan cite no memory system. This verdict addresses only Xu and Yan, not the other surveys named in the citing sentence. (LLM, conf=0.78)

    Checked by a reasoning model — may be wrong.

    Experimental — accuracy not yet measured

  • Most agent skills are manually authored, which requires anticipating the procedural knowledge and workflows that an agent will need.

    “Most agent skills are manually authored, which requires anticipating the procedural knowledge and workflows that an agent will need (Li et al., 2026; Liang et al., 2026; Xu and Yan, 2026).”

    From WikiSkill: Compiling Agent Experience into Persistent Knowledge for Skill Evolution (2026) · cites this paper as Xu and Yan, 2026

    Section 4.1 calls direct human authoring an important way to create skills, and Section 2.2 says the Agent Skills paradigm emphasizes human-authored packages. Section 2.1 explains that skills contain workflow guidance and procedural knowledge. The paper does not establish that most skills are manually authored or explicitly say that authors must anticipate the workflows agents will need. (LLM, conf=0.83)

    Experimental — accuracy not yet measured

  • Skills are formalized as composable packages with npm-like package managers.

    “skills formalized as composable packages [87] with npm-like package managers [88]”

    From Harness Engineering: Anatomy, Architecture, and Evolution of Coding Agents -- A Source-Code Study of Eleven Systems (2026) · cites this paper as [87]

Self-check

Percentages, sums and reported differences re-computed from the paper’s own numbers.

The self-check needs the paper’s full text.

Cites

No references could be resolved yet.

Research works printed but not linked: 28

  1. Saaket Agashe et al. 2025. Agent S2: A Compositional Generalist- Specialist Framework for Computer Use Agents. arXiv preprint arXiv:2504.00906 (2025). · arXiv
  2. UC Berkeley. 2025. Berkeley Function-Calling Leaderboard. https: //gorilla.cs.berkeley.edu/leaderboard.html. (2025). ICML 2025.
  3. Tianle Cai, Xuezhi Wang, Tengyu Ma, Xinyun Chen, and Denny Zhou. 2023. Large Language Models as Tool Makers. arXiv preprint arXiv:2305.17126 (2023). · arXiv
  4. Tianyi Chen et al. 2026. CUA-Skill: Develop Skills for Computer Using Agent. arXiv preprint arXiv:2601.21123 (2026). · arXiv
  5. Boyu Gou et al. 2025. UGround: Universal Visual Grounding for GUI Agents. In International Conference on Learning Representations (ICLR). Oral.
  6. Xueyu Hu et al. 2025. OS Agents: A Survey on MLLM-based Agents for General Computing Devices Use. In Proceedings of the Association for Computational Linguistics (ACL).
  7. Zhengbo Jiao et al. 2026. Agentic Proposing: Enhancing Large Lan- guage Model Reasoning via Compositional Skill Synthesis. arXiv preprint arXiv:2602.03279 (2026). · arXiv
  8. Xiaoxiao Li. 2026. When Single-Agent with Skills Replace Multi-Agent Systems and When They Fail. arXiv preprint arXiv:2601.04748 (2026). · arXiv
  9. Yi Liu et al. 2026. Agent Skills in the Wild: An Empirical Study of Se- curity Vulnerabilities at Scale. arXiv preprint arXiv:2601.10338 (2026). · arXiv
  10. Yi Liu et al. 2026. Malicious Agent Skills in the Wild: A Large-Scale Security Empirical Study. arXiv preprint arXiv:2602.06547 (2026). · arXiv
  11. Junyu Luo et al. 2025. Large Language Model Agent: A Sur- vey on Methodology, Applications and Challenges. arXiv preprint arXiv:2503.21460 (2025). · arXiv
  12. Aske Plaat et al. 2025. Agentic Large Language Models: A Survey. arXiv preprint arXiv:2503.23037 (2025). · arXiv
  13. Cheng Qian et al. 2024. CREATOR: Tool Creation for Disentangling Ab- stract and Concrete Reasonings of Large Language Models. In Findings of EMNLP.
  14. Yujia Qin et al. 2025. UI-TARS: Pioneering Automated GUI Interaction with Native Agents. arXiv preprint arXiv:2501.12326 (2025). · arXiv
  15. Changle Qu et al. 2025. Tool Learning with Large Language Models: A Survey. Frontiers of Computer Science 19, 8 (2025).
  16. David Schmotz, Sahar Abdelnabi, and Maksym Andriushchenko. 2025. Agent Skills Enable a New Class of Realistic and Trivially Simple Prompt Injections. arXiv preprint arXiv:2510.26328 (2025). · arXiv
  17. Idan Shenfeld, Mehul Damani, et al. 2026. Self-Distillation Enables Continual Learning. arXiv preprint arXiv:2601.19897 (2026). · arXiv
  18. Linxin Song et al. 2025. CoAct-1: Computer-using Agents with Coding as Actions. arXiv preprint arXiv:2508.03923 (2025). · arXiv
  19. Zeyi Sun, Ziyu Liu, Yuhang Zang, Yuhang Cao, Xiaoyi Dong, Tong Wu, Dahua Lin, and Jiaqi Wang. 2025. SEAgent: Self-Evolving Computer Use Agent with Autonomous Learning from Experience. arXiv preprint arXiv:2508.04700 (2025). · arXiv
  20. Guanzhi Wang et al. 2023. Voyager: An Open-Ended Embodied Agent with Large Language Models. arXiv preprint arXiv:2305.16291 (2023). · arXiv
  21. Haoming Wang et al. 2025. UI-TARS-2 Technical Report: Advancing GUI Agent with Multi-Turn Reinforcement Learning. arXiv preprint arXiv:2509.02544 (2025). · arXiv
  22. Jiongxiao Wang et al. 2025. Reinforcement Learning for Self-Improving Agent with Skill Library. arXiv preprint arXiv:2512.17102 (2025). · arXiv
  23. Xinyuan Wang et al. 2025. OpenCUA: Open Foundations for Computer- Use Agents. In Advances in Neural Information Processing Systems (NeurIPS). Spotlight.
  24. Jing Wu et al. 2026. OS-Marathon: Benchmarking Computer- Use Agents on Long-Horizon Repetitive Tasks. arXiv preprint arXiv:2601.20650 (2026). · arXiv
  25. Qianhui Wu et al. 2025. GUI-Actor: Coordinate-Free Visual Grounding for GUI Agents. arXiv preprint arXiv:2506.03143 (2025). · arXiv
  26. Tianbao Xie et al. 2025. Scaling Computer-Use Grounding via User Interface Decomposition and Synthesis. In Advances in Neural Infor- mation Processing Systems (NeurIPS). Spotlight.
  27. Xinbin Yuan et al. 2025. Enhancing Visual Grounding for GUI Agents via Self-Evolutionary Reinforcement Learning. arXiv preprint arXiv:2505.12370 (2025). · arXiv
  28. Chaoyun Zhang et al. 2024. Large Language Model-Brained GUI Agents: A Survey. arXiv preprint arXiv:2411.18279 (2024). Updated May 2025. · arXiv

Cited by

Sorted by citations

Authors
Xu, R., & Yan, Y.
Affiliations
Westlake University (CN)
Venue
arXiv
Publisher
arXiv
Published
2026
ISSN
2331-8422 (ISSN-L)
DOI
10.48550/arxiv.2602.12430
arXiv
2602.12430
OpenAlex
W7129059528
Cited by
3
References
0
Citations by year
2026: 3
Type
posted content
Language
en
Open access
Licence
Locations
  • arXiv (Cornell University) (submittedVersion, cc-by-nc-nd)
  • arXiv (Cornell University)
Topics
  • Physical Sciences › Computer Science › Artificial Intelligence › Natural Language Processing Techniques
  • Physical Sciences › Computer Science › Artificial Intelligence › Artificial Intelligence Applications
  • Physical Sciences › Computer Science › Artificial Intelligence › AI-based Problem Solving and Planning
Keywords
agent skills, large language models, Model Context Protocol, skill acquisition, skill discovery, computer-use agents, GUI grounding, permission model

About these checks

Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.

Statistics and arithmetic are recomputed, not judged.

Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.

What counts as a claim ›How we measure confidence ›How we check this ›

Are you an author, or do you see a problem with this page? Request a review