mlsanityData to 14 Oct 2026

SkillConsist: Detecting Inconsistencies in Agent Skills via Bidirectional Graph Alignment

arXiv 2608.07639 ↗First posted 7 Aug 2026cs.LG cs.AIcited by 1

On the map: LLM agents and tool use → Agent skill learning and evolution

Abstract (arXiv)

Agent Skills provide reusable capabilities to LLM agents. Agent Skill inconsistencies can expose undisclosed dangerous behavior or cause wrong Skill selection. Recent Agent Skill research has increasingly examined Agent Skill consistency detection. Existing methods evaluate behaviors or security-property graphs against predefined categories or declared scopes. More recently, PL-HCL uses an LLM-based model to learn consistency across metadata, instructions, and resources. However, declaration and implementation behavior can be mixed across text and code, and a concise declaration can correspond to multiple connected implementation steps. We present SkillConsist to address both challenges. An LLM separates declaration and implementation content into behavior records on the implementation and declaration sides, while static analysis supplements implementation records. These records form declaration and implementation behavior graphs, respectively. Starting from a behavior record on either side, bidirectional graph alignment searches the other graph for a candidate subgraph and expands it along behavior relations until it completely expresses the source-side behavior. Graph differencing identifies conflicts between aligned subgraphs and outputs the detection results. We construct a 633-Skill benchmark from ClawHub's 500 most-downloaded public Skills and 133 Skill-Inject packages. The benchmark contains 319 inconsistent and 314 consistent Skills and 442 localized inconsistency annotations. On this benchmark, SkillConsist achieves 86.85% precision, 89.03% recall, and 87.93% F1 for package-level detection, improving F1 over the best baseline by 20.43 percentage points. For localization, it achieves 67.60% precision, 58.14% recall, and 62.52% F1.

Key facts. Cited by 1 paper in the map (data through 14 Oct 2026). Placed in Agent skill learning and evolution, one of 16 directions in LLM agents and tool use. Builds on 18 of its 39 references that are in the map. First posted on arXiv 7 Aug 2026.

Builds on

18 of 39 references.

Closest ancestors · 1

Same direction, newest first

  1. 2026Skill Coverage: A Test Adequacy Metric for Agent Skills9 Jun

Other references · 17

  1. 2025AgentSpec: Customizable Runtime Enforcement for Safe and Reliable LLM Agentscited by 223
  2. 2025Prompt Injection Attack to Tool Selection in LLM Agentscited by 158
  3. 2026Agent Skills in the Wild: An Empirical Study of Security Vulnerabilities at Scalecited by 105
  4. 2026Skill-Inject: Measuring Agent Vulnerability to Skill File Attackscited by 90
  5. 2026ToolSafe: Enhancing Tool Invocation Safety of LLM-based agents via Proactive Step-level Guardrail and Feedbackcited by 72
  6. 2026SkillJect: Effectively Automating Skill-Based Prompt Injection for Skill-Enabled Agentscited by 25
  7. 2020Deep Just-In-Time Inconsistency Detection Between Comments and Source Codecited by 20
  8. 2026SkillSieve: A Hierarchical Triage Framework for Detecting Malicious AI Agent Skillscited by 20
  9. 2026MalSkillBench: A Runtime-Verified Benchmark of Malicious Agent Skillscited by 19
  10. 2026Behavioral Integrity Verification for AI Agent Skillscited by 7
  11. 2022Code Comment Inconsistency Detection with BERT and Longformercited by 6
  12. 2025DocPrism: Multi-lingual Detection of Incorrectness Inconsistencies between Code and Documentationcited by 3
5 more
  1. 2026CASCADE: Detecting Inconsistencies between Code and Documentation with Automatic Test Generationcited by 3
  2. 2026Do Skill Descriptions Tell the Truth? Detecting Undisclosed Security Behaviors in Code-Backed LLM Skillscited by 3
  3. 2026AIP: A Graph Representation for Learning and Governing Agent Skillscited by 3
  4. 2026Description-Code Inconsistency in Real-world MCP Servers: Measurement, Detection, and Security Implicationscited by 2
  5. 2026NEXUS: Structured Runtime Safety for Tool-Using LLM Agentscited by 1

Built on by

Cited by year (2026 to 14 Oct)

Citing papers per year: 2026: 1.

1 paper.

Similar, not cited

Close in wording, no citation either way

  1. 2026GraSP: Graph-Structured Skill Compositions for LLM Agents
  2. 2026SkillDAG: Self-Evolving Typed Skill Graphs for LLM Skill Selection at Scale
  3. 2026Agent Skills Can Be Harmful: An Empirical Study of Skill-Induced Failures in LLM Agents
  4. 2026SkillScope: Toward Fine-Grained Least-Privilege Enforcement for Agent Skills
  5. 2026Skills Are Not Islands: Measuring Dependency and Risk in Agent Skill Supply Chains
  6. 2026When Safe Skills Collide: Measuring Compositional Risk in Agent Skill Ecosystems
  7. 2026SLBench: Evaluating How LLM Agents Follow Logical Relations in Skills
  8. 2026SkillRouter: Skill Routing for LLM Agents at Scale