Search papers, labs, and topics across Lattice.
This paper provides a systematic overview of agentic skills, reusable procedural capabilities that enhance the reliability of long-horizon workflows in LLM agents. It introduces two taxonomies: one categorizing seven design patterns for packaging and executing skills, and another classifying skills by representation (natural language, code, policy) and scope (web, OS, robotics). The paper also analyzes security risks, such as supply-chain attacks and prompt injection, and surveys evaluation approaches, highlighting the impact of curated versus self-generated skills on agent performance.
Malicious agentic skills are already being deployed in the wild to exfiltrate API keys and cryptocurrency wallets, highlighting a critical security gap in current LLM agent ecosystems.
Agentic systems increasingly rely on reusable procedural capabilities, \textit{a.k.a., agentic skills}, to execute long-horizon workflows reliably. These capabilities are callable modules that package procedural knowledge with explicit applicability conditions, execution policies, termination criteria, and reusable interfaces. Unlike one-off plans or atomic tool calls, skills operate (and often do well) across tasks. This paper maps the skill layer across the full lifecycle (discovery, practice, distillation, storage, composition, evaluation, and update) and introduces two complementary taxonomies. The first is a system-level set of \textbf{seven design patterns} capturing how skills are packaged and executed in practice, from metadata-driven progressive disclosure and executable code skills to self-evolving libraries and marketplace distribution. The second is an orthogonal \textbf{representation $\times$ scope} taxonomy describing what skills \emph{are} (natural language, code, policy, hybrid) and what environments they operate over (web, OS, software engineering, robotics). We analyze the security and governance implications of skill-based agents, covering supply-chain risks, prompt injection via skill payloads, and trust-tiered execution, grounded by a case study of the ClawHavoc campaign in which nearly 1{,}200 malicious skills infiltrated a major agent marketplace, exfiltrating API keys, cryptocurrency wallets, and browser credentials at scale. We further survey deterministic evaluation approaches, anchored by recent benchmark evidence that curated skills can substantially improve agent success rates while self-generated skills may degrade them. We conclude with open challenges toward robust, verifiable, and certifiable skills for real-world autonomous agents.
