Timofey Sanko and Yuan Tian submitted a preprint on 27 October 2026 reporting that about one in seventeen English agent skills contains instructions that loosen human oversight. The abstract of When Skills Tell Agents Not to Ask describes an analysis of 1.53 million skills from GitSkills, with about 88,000 containing such directives.[1]
Skills are reusable instruction packages loaded by agents. The authors identify directives to proceed without approval, bypass checks with --no-verify, or continue without checking in. They report manually labeling 2,097 instruction units and training a detector to extend the analysis. Permission flags were the most common mechanism, and 70.1% of loosening directives applied unconditionally.[1]
Among skills with comparable amounts of oversight language, those running shell code, installing packages, or using sudo had 1.7–1.8 times the odds of containing loosening directives, the authors report. Copying was concentrated: 2.4% of skill families carrying such directives accounted for half of their copies. These are reported associations and corpus findings; the abstract does not establish how often deployed agents followed those instructions.[1]
The authors also report that open-source skill scanners detected at most 46% of loosening directives, with precision below 0.4. The language model behind those scanners, prompted with their labeling codebook, detected 61% at precision 0.71. These figures describe the authors’ evaluation, rather than independently reproduced results.[1]
[1]: https://arxiv.org/abs/2610.37734
Lead photo: Timofey Sanko, Yuan Tian · CC BY 4.0.
Sources
Check or correct this page
Verification record
The digest below shows whether the text you are reading matches the published source. It does not show that the reporting is correct. The build computes it from this page's Markdown source and lists it in the site manifest.
1e09bc2a3fe64044d65e0151cfffefc6a864e1a8dceb90a7fad565bb09f212e7
