arXivDaily arXiv每日学术速递 周一至周五更新
arXiv周末暂无论文更新,休息一下吧,周末愉快~~
arXiv 2602.20867cs.CRcs.AIcs.CEcs.ET
收藏

SoK: 代理技能——超越LLM代理中的工具使用

SoK: Agentic Skills -- Beyond Tool Use in LLM Agents

University of Technology Sydney(悉尼科技大学);CSIRO Data61(CSIRO数据61)

Yanna Jiang, Delong Li, Haiyu Deng, Baihe Ma, Xu Wang, Qin Wang, Guangsheng Yu

AI总结:

本文探讨了代理技能在LLM代理中的应用,分析了技能的生命周期管理、分类方法及其安全影响,并提出了未来研究挑战。

摘要:

代理系统越来越多地依赖可重用的程序性能力,即所谓的代理技能,以可靠地执行长周期工作流。这些能力是可调用的模块,将程序性知识与显式适用条件、执行策略、终止标准和可重用的接口打包。与一次性计划或原子工具调用不同,技能在(并且往往在)不同任务中运作(并往往表现良好)。本文跨整个生命周期(发现、练习、提炼、存储、组合、评估和更新)映射技能层,并引入了两种互补的分类法。第一种是系统层面的七种设计模式集,描述了技能在实践中如何打包和执行,从元数据驱动的渐进披露和可执行代码技能到自我进化库和市场分布。第二种是正交的表示×范围分类法,描述了技能是什么(自然语言、代码、策略、混合)以及它们在什么环境中运作(网络、操作系统、软件工程、机器人)。我们分析了基于技能的代理的安全性和治理影响,涵盖供应链风险、通过技能负载的提示注入以及信任分层执行,通过ClawHavoc活动的案例研究,其中近1200个恶意技能渗透了主要代理市场,大规模窃取API密钥、加密货币钱包和浏览器凭证。我们进一步调查了确定性评估方法,通过最近的基准证据,证明了经过筛选的技能可以显著提高代理的成功率,而自动生成的技能可能会降低它们。我们最后以向稳健、可验证和可认证的技能方向的开放挑战作结。

英文摘要:

Agentic systems increasingly rely on reusable procedural capabilities, \textit{a.k.a., agentic skills}, to execute long-horizon workflows reliably. These capabilities are callable modules that package procedural knowledge with explicit applicability conditions, execution policies, termination criteria, and reusable interfaces. Unlike one-off plans or atomic tool calls, skills operate (and often do well) across tasks. This paper maps the skill layer across the full lifecycle (discovery, practice, distillation, storage, composition, evaluation, and update) and introduces two complementary taxonomies. The first is a system-level set of \textbf{seven design patterns} capturing how skills are packaged and executed in practice, from metadata-driven progressive disclosure and executable code skills to self-evolving libraries and marketplace distribution. The second is an orthogonal \textbf{representation $\times$ scope} taxonomy describing what skills \emph{are} (natural language, code, policy, hybrid) and what environments they operate over (web, OS, software engineering, robotics). We analyze the security and governance implications of skill-based agents, covering supply-chain risks, prompt injection via skill payloads, and trust-tiered execution, grounded by a case study of the ClawHavoc campaign in which nearly 1{,}200 malicious skills infiltrated a major agent marketplace, exfiltrating API keys, cryptocurrency wallets, and browser credentials at scale. We further survey deterministic evaluation approaches, anchored by recent benchmark evidence that curated skills can substantially improve agent success rates while self-generated skills may degrade them. We conclude with open challenges toward robust, verifiable, and certifiable skills for real-world autonomous agents.

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑