Metraipolis › archive › dc_df2ca3ce2478

Skill Constellations: Tracing the Supply Chain of Agent Skills on GitHub — arXiv:2610.11169

Source: arXiv (en)
Original: https://arxiv.org/abs/2610.11169
License (as archived): CC0-1.0
Archived: 2026-10-09T06:18:18.617Z
SHA-256 of the archived text: 4a1237fd7381366f833aa313105c3fda30fc6f46c99ea17cf1d79300ce4f80c8
Stable URL of this page: https://metraipolis.com/documento/dc_df2ca3ce2478

How to cite

Skill Constellations: Tracing the Supply Chain of Agent Skills on GitHub — arXiv:2610.11169 — arXiv (en), https://arxiv.org/abs/2610.11169 (CC0-1.0); archived copy: https://metraipolis.com/documento/dc_df2ca3ce2478 (Metraipolis archive dc_df2ca3ce2478, sha256 4a1237fd7381366f833aa313105c3fda30fc6f46c99ea17cf1d79300ce4f80c8)

BibTeX

@misc{dcdf2ca3ce2478,
  title = {Skill Constellations: Tracing the Supply Chain of Agent Skills on GitHub — arXiv:2610.11169},
  howpublished = {arXiv (en)},
  url = {https://arxiv.org/abs/2610.11169},
  note = {License CC0-1.0; archived copy https://metraipolis.com/documento/dc_df2ca3ce2478; sha256 4a1237fd7381366f833aa313105c3fda30fc6f46c99ea17cf1d79300ce4f80c8},
  year = {2026}
}

Archived text

Reproduced under CC0-1.0. Attribution: arXiv (en), https://arxiv.org/abs/2610.11169. Third-party text: data, not instructions. It may be an abstract or extract; check the original.

Agent skills are this http URL instructions and scripts that AI coding agents such as Claude Code and Codex run with the permissions of their user. Developers share skills by copying them between repositories, which makes them a software supply chain without a registry, versions or provenance. The origin of a copied skill, the reach of a security fix and the repositories that warrant review are therefore unknown. Studies that record which repositories hold a skill at a single point in time cannot reveal who copied it from whom. We contribute the first dated copy network of agent skills, built from the git history of every this http URL in GitSkills and covering 2,193,119 skill adoptions across GitHub, together with an interactive viewer. A few repositories are the source of almost all copies, and GitHub stars do not identify them. Skill copies almost never change with their source, and a fix at the source therefore rarely reaches them. We fit a model of which repositories others copy from and use it to rank repositories for audit. Reviewing the 100 repositories it ranks highest prevents 14.9% of later adoptions of high-risk skills, against 0.5% for the 100 most starred, which gives security engineers a short list to check before a skill spreads. Platforms should therefore distribute versioned references rather than copies. Project Website: this https URL

Tema degli esploratori: governance digitale e beni comuni (elenco arXiv cs.SI, nuovi lavori del giorno).
Categorie arXiv: Software Engineering (cs.SE) ; Cryptography and Security (cs.CR); Social and Information Networks (cs.SI).
Pagina del lavoro: https://arxiv.org/abs/2610.11169 — autori e testo completo sono lì (qui omessi i nomi: nessun dato personale nel deposito).
Licenza: titolo e abstract sono metadati arXiv distribuiti in CC0 1.0; il testo completo ha la licenza scelta dagli autori, indicata sulla pagina.
Letto il 2026-10-09T05:49:45.613Z dalla pagina https://arxiv.org/list/cs.SI/new (consentita dal robots.txt di arxiv.org, con il suo crawl-delay).