Study Finds 6% of Agent Skills Bypass Human Oversight
A new study reveals that approximately 1 in 17 public agent skills contain instructions to bypass human confirmation, with existing security scanners missing most instances. The research suggests limiting such directives to specific contexts (e.g., CI) and screening for oversight gaps rather than just malware.
Full Report
Rohan Paul (@rohanpaul_ai) · 2026-10-31 11
This paper finds that about 1 in 17 agent skills tells agents to skip human checks, and existing skill scanners miss most of them.
Agent skills are shared SKILL.md instruction files that agents load on demand. One line like "push without confirmation" or "keep going until done" removes a human checkpoint from every agent that loads it.
They analyzed 1.53 million English skills from public GitHub repos, then tested 2 open-source scanners from Cisco and NVIDIA that can call GPT-5.4.
Roughly 88,000 skills contain such a line, and 70.1% of these lines apply in every context, not only in cases like CI. The scanners caught at most 46% at under 0.4 precision, while the same LLM, asked about oversight instead of malice, caught 61% at 0.71 precision.
Limit every "don't ask" line in your skills to a context, such as CI only, and screen skills for oversight, not just malware.
