Counterfactual Trace Auditing of LLM Agent Skills
On the map: LLM agents and tool use → Agent skill learning and evolution
Abstract (arXiv)
Large Language Model agents are increasingly augmented with agent skills. Current evaluation methods for skills remain limited. Most deployed benchmarks report only pass rate before and after a skill is attached, treating the skill as a black box change to agent behavior. We introduce Counterfactual Trace Auditing (CTA), a framework for measuring how a skill changes agent behavior. CTA pairs each with skill agent trace with a without skill counterpart on the same task, segments both traces into goal directed phases, aligns the phases, and emits structured Skill Influence Pattern (SIP) annotations. These annotations describe the behavioral effect of a skill rather than only its task outcome. We instantiate CTA on SWE-Skills-Bench with Claude across 49 software engineering tasks. The resulting audit reveals a clear evaluation gap. Pass rate changes by only +0.3 percentage points on average, suggesting little aggregate effect. Yet CTA identifies 522 SIP instances across the same paired traces, showing that the skills substantially reshape agent behavior even when pass rate is nearly unchanged. The audit also separates several recurring effects that pass rate cannot detect, including literal template copying, off task artifact creation, excess planning, and task recovery. Three findings emerge. First, high baseline tasks contain most of the observed skill effects, although their pass rate is already saturated and therefore cannot reflect those effects. Second, tasks with moderate baseline performance show the most recoverable gain, but often at substantially higher token cost. Third, the dominant SIP type can be identified by baseline bucket: surface anchoring is most common on ceiling tasks and edge-case prompting is most common on mid-range and floor tasks. These regularities turn informal failure mode observations into reproducible behavioral measurements.
Key facts. Cited by 10 papers in the map (data through 14 Oct 2026). Placed in Agent skill learning and evolution, one of 16 directions in LLM agents and tool use. Builds on 26 of its 29 references that are in the map. First posted on arXiv 12 May 2026.
Builds on
26 of 29 references.
Closest ancestors · 1
Same direction, newest first
Other references · 25
- 2022Chain-of-Thought Prompting Elicits Reasoning in Large Language Modelscited by 12,459
- 2022ReAct: Synergizing Reasoning and Acting in Language Modelscited by 8,695
- 2023Reflexion: Language Agents with Verbal Reinforcement Learningcited by 4,276
- 2023Toolformer: Language Models Can Teach Themselves to Use Toolscited by 4,182
- 2023Lost in the Middle: How Language Models Use Long Contextscited by 3,455
- 2023Self-Refine: Iterative Refinement with Self-Feedbackcited by 3,442
- 2023SWE-bench: Can Language Models Resolve Real-World GitHub Issues?cited by 3,373
- 2023AutoGen: Enabling Next-Gen LLM Applications via Multi-Agent Conversationcited by 1,988
- 2021Calibrate Before Use: Improving Few-Shot Performance of Language Modelscited by 1,392
- 2021Fantastically Ordered Prompts and Where to Find Them: Overcoming Few-Shot Prompt Order Sensitivitycited by 1,135
- 2023ChatGPT Outperforms Crowd-Workers for Text-Annotation Taskscited by 870
- 2026SWE-Skills-Bench: Do Agent Skills Actually Help in Real-World Software Engineering?cited by 82
13 more
- 2023Panoptic Scene Graph Generation with Semantics-Prototype Learningcited by 42
- 2025Treble Counterfactual VLMs: A Causal Approach to Hallucinationcited by 35
- 2023Understanding In-Context Learning from Repetitionscited by 29
- 2024DPU: Dynamic Prototype Updating for Multimodal Out-of-Distribution Detectioncited by 29
- 2025When Agents go Astray: Course-Correcting SWE Agents with PRMscited by 28
- 2025Beyond the Final Answer: Evaluating the Reasoning Trajectories of Tool-Augmented Agentscited by 24
- 2025Secure On-Device Video OOD Detection Without Backpropagationcited by 19
- 2025Beyond Final Code: A Process-Oriented Error Analysis of Software Development Agents in Real-World GitHub Scenarioscited by 14
- 2024Mitigating Copy Bias in In-Context Learning through Neuron Pruningcited by 11
- 2026Defenses Against Prompt Attacks Learn Surface Heuristicscited by 11
- 2026Beyond Resolution Rates: Behavioral Drivers of Coding Agent Success and Failurecited by 11
- 2026SkillTester: Benchmarking Utility and Security of Agent Skillscited by 10
- 2026The Autonomy Tax: Defense Training Breaks LLM Agentscited by 9
Built on by
Citing papers per year: 2026: 10.
10 papers.
- 2026SkillCoach: Self-Evolving Rubrics for Evaluating and Enhancing Agentic Skill-Usecited by 8
- 2026Rethinking Self-Evolving Agent Skills: Feedback Dynamics over Multiple Roundscited by 7
- 2026Auditing Harness Tampering in Self-Improving Agentscited by 4
- 2026CatchBench: When Can an Agent Failure Be Caught?cited by 3
- 2026Harnessing Agent Skills: Architectural Patterns and a Reference Architecture for Skill-Mediated LLM Agentscited by 1
- 2026WeClawArena: An Auditable Sandbox and Benchmark for Cross-User Agents Collaboration and Security in Human-Centered Agent Networkscited by 1
- 2026Adversarial Feeds Steer LLM Agent Decisions Against Their Defaultscited by 0
- 2026HERALD: Counterfactual Audits and Minimal Repairs for Proof-of-Retrieval Rewardscited by 0
- 2026What Happens During Autonomous Deep Research After the User Steps Away?cited by 0
- 2026Beyond Instruction Following: Learning Grounded Skill-Following with Skill Contractscited by 0
- 2026Beyond Instruction Following: Learning Grounded Skill-Following with Skill Contracts4 Oct 2026
- 2026What Happens During Autonomous Deep Research After the User Steps Away?27 Sep 2026
- 2026Auditing Harness Tampering in Self-Improving Agents30 Aug 2026
- 2026CatchBench: When Can an Agent Failure Be Caught?24 Aug 2026
- 2026HERALD: Counterfactual Audits and Minimal Repairs for Proof-of-Retrieval Rewards6 Aug 2026
- 2026WeClawArena: An Auditable Sandbox and Benchmark for Cross-User Agents Collaboration and Security in Human-Centered Agent Networks4 Aug 2026
- 2026Rethinking Self-Evolving Agent Skills: Feedback Dynamics over Multiple Rounds31 Jul 2026
- 2026SkillCoach: Self-Evolving Rubrics for Evaluating and Enhancing Agentic Skill-Use2 Jul 2026
- 2026Adversarial Feeds Steer LLM Agent Decisions Against Their Defaults30 May 2026
- 2026Harnessing Agent Skills: Architectural Patterns and a Reference Architecture for Skill-Mediated LLM Agents29 May 2026
Similar, not cited
Close in wording, no citation either way
- 2026SkillAudit: Ground-Truth-Free Skill Evolution via Paired Trajectory Auditing
- 2026SkillAudit: From Fixed-Suite Benchmarking to Skill-Centered Assessment
- 2026Skill-Use: Can LLMs Actually Use Skills in Agentic Harnesses?
- 2026Skill Coverage: A Test Adequacy Metric for Agent Skills
- 2026SkillJuror: Measuring How Agent Skill Organization Changes Runtime Behavior
- 2026TRACE: Diagnosing Verifier Brittleness in Agentic Evaluation
- 2026A Framework for Evaluating Agentic Skills at Scale
- 2026SkillRevise: Improving LLM-Authored Agent Skills via Trace-Conditioned Skill Revision