The paper examines the rapid growth of the OpenClaw AI agent’s public skill registry, noting a near doubling of the observable stock in 91 days and a concentration of activity in a short period. It finds that only a small fraction of skills receive significant attention—most have no stars or comments—while a large portion contains privilege‑evident code. Automated security scanners show low agreement and sensitivity, indicating that current tools are insufficient for reliable governance of fast‑expanding agent‑skill ecosystems.
By Yunpeng Xiong, Ting Zhang
arXiv:2606. 01494v1 Announce Type: cross Abstract: Agent skills extend AI agents with reusable instructions, tools, scripts, references, and workflows, establishing a security boundary distinct from both model safety and traditional package-malware detection.
By Vincent Koc, Patrick Erichsen, Jacob Tomlinson, Agustin Rivera, Michael Appel, Nir Paz
arXiv:2603. 16572v2 Announce Type: replace-cross Abstract: Agent skills extend local AI agents, such as Claude Code and OpenClaw, with additional functionality.
By Florian Holzbauer, David Schmidt, Gabriel Gegenhuber, Sebastian Schrittwieser, Johanna Ullrich
arXiv:2609.05677v1 Announce Type: cross
Abstract: Lifelong LLM agents increasingly rely on external skill artifacts as one element for preserving and reusing capabilities over time. These skills (usu...
By Chen Shen, Estevam Hruschka
arXiv:2606. 24429v1 Announce Type: cross Abstract: Generative AI coding agents are entering the open-source supply chain, yet their diverse and often invisible traces leave their prevalence poorly understood.
By Arsham Khosravani, Audris Mockus
arXiv:2606. 00925v1 Announce Type: cross Abstract: Open agent platforms allow community contributors to publish reusable skills that agents can invoke at runtime.
By Ismail Hossain, Sai Puppala, Zhuoran Lu, Sajedul Talukder, Nan Jiang