The paper introduces skilder, a framework that organizes LLM agent capabilities into role‑scoped bundles of skills, tools, and instructions, with explicit limits. Agents start with a minimal role catalog, discover the roles needed for a task, and receive the associated tools only through a single MCP server, ensuring deterministic enforcement of scope. Experiments on 13 tasks with six models show that skilder’s authorization layer prevents unauthorized tool calls and parameter violations while maintaining flexibility through dynamic cross‑role capability acquisition.
By Michael Stettler, Benjamin Girardet, Jonas Canton, Nicolas Corod
arXiv:2603.17170v2 Announce Type: replace-cross
Abstract: AI agents increasingly execute users' natural-language (NL) tasks by calling Web services, yet today's Web authorizes these calls through OAu...
By Reshabh K Sharma, Linxi Jiang, Shuo Chen, Zhiqiang Lin
arXiv:2512.11147v2 Announce Type: replace-cross
Abstract: AI agents are increasingly granted autonomous access to sensitive user data and third-party services, making effective permission management...
By Jinhao Zhu, Xiao Huang, Kevin Tseng, Gil Vernik, Shishir G. Patil, Vivian Fang, Raluca Ada Popa
arXiv:2610.18330v1 Announce Type: new
Abstract: Training business automation agents requires executable tasks that connect a natural-language request to an application state and a verifiable end stat...
By Xiangrui Liu, Shuo Tang, Siheng Chen
arXiv:2608. 15127v1 Announce Type: cross Abstract: Agentic applications are shifting AI serving from isolated model inference to long-running workloads in which LLMs coordinate tools, environments, and persistent state.
By Chaokun Chang, Yukun Zhou, Kaihua Fu, Dakai An, Tianyu Feng, Hanfeng Lu, Sheng Yao, Pu Guo, Yinghao Yu, Yizhou Shan, Bo Li, Binhang Yuan, Wei Wang
The paper investigates how the representation of tool interfaces—referred to as a tool schema—affects the performance of large language model agents. By systematically transforming a native tool schema with nine operators, the authors demonstrate that agents exhibit significant variability in success rates across different but functionally equivalent schema variants, a phenomenon they call schema bias. Experiments on eleven LLMs, including closed models, reveal that success can range from complete failure to 97% solely due to schema differences, and that training only mitigates bias when the specific variant is included in the training data.
By Yinhong Liu, Zhili Tan, Zilin Wang, Zhijiang Guo