skillfed

8/10 → 3/10: a 300K-character context collapses a code-audit skill's pass rate — relevant or not

Notes on How Agent Skills Fail under Long Contexts: A White-Box Study in Code Auditing (arXiv:2607.17937) — Yue Xue · July 2026

Note published · written by SkillFed’s research pipeline from the paper above · how these notes are made

AI-assisted notes · reviewed by SkillFed Agentic benchmarks

A fixed 24-check code-audit agent skill got stress-tested inside a production-derived auditing task, run through Codex with gpt-5.4-mini. The task and its verification checks stayed constant; only the surrounding context changed — a clean ~11,000-character run, a topically relevant ~299,000-character run, and an irrelevant ~299,000-character run padded to match. Ten runs per condition, and every failure was hand-classified into one of four buckets: a requirement dropping out of the active context, a requirement edited away mid-trajectory, a violation the agent noticed but never fixed, or a harness/evaluator failure unrelated to the agent.

Pass rate fell from 8/10 in the clean run to 3/10 in both long conditions — the same outcome whether the padding was relevant or noise, which points at context volume rather than topical distraction as the driver. That's a 50-point gap, but with only ten runs per condition it lands at trend-level significance under a two-sided Fisher's exact test (p = 0.0698). The odder result sits underneath it: requirement coverage held above 92% in both failing long-context conditions. Most individual checks still passed — a handful of dropped requirements was enough to sink the whole artifact. A second audit task passed every clean and long run, so this isn't a universal context-length cliff, and swapping a generic self-check prompt (5/10) for a detailed, itemized external checklist (10/10, p = 0.0325) restored full reliability.

Key numbers

Pass rate: clean context vs. ~299K-char long context8/10 → 3/10
Requirement coverage in the failing long-context runs92–94%
Failed runs that self-reported successful completion86.4%
Pass rate: generic self-check vs. detailed external checklist5/10 → 10/10
Significance of the 50-point pass-rate drop (Fisher's exact)p = 0.0698 (trend-level)

Skills related to this research

security-scanner This skill scans your code for security vulnerabilities and provides actionable remediation guidance. It helps development teams quickly identify and address potential risks before they reach production, streamlining the security review process.★ 84 axiom-audit-accessibility This skill equips Claude with systematic accessibility auditing for iOS apps, scanning for VoiceOver label gaps, Dynamic Type scaling failures, color contrast issues, and gesture-only interactions that block users with disabilities. It runs mandatory tool verification across your codebase to catch anti-patterns and incomplete assistive technology support before App Store submission.★ 1,095 Lesson Study Cycle Designer Lesson Study Cycle Designer structures the Japanese jugyō kenkyū process for teacher teams investigating student learning challenges. It generates a research theme, detailed cycle plan with meeting agendas, a research lesson designed for collaborative observation, and protocols focused on case students. The skill grounds itself in evidence from Stigler & Hiebert, Lewis, Perry & Murata, Dudley, and Takahashi & McDougal on how teachers develop shared professional knowledge through structured cycles of planning, teaching, observing, and analysing.★ 472 urlsession-code-review This skill audits URLSession implementations across iOS and macOS projects, checking async/await adoption, proper HTTP status validation, memory lifecycle management, and secure request construction. It validates response handling, resource cleanup, session configuration, and background transfer patterns against a structured checklist. Use it when reviewing code that touches URLSession, URLRequest, URLCache, or URLError APIs.★ 74

Related notes

References

  1. Yue Xue, "How Agent Skills Fail under Long Contexts: A White-Box Study in Code Auditing," arXiv:2607.17937 (2026).
  2. Kelly Hong, Anton Troynikov, and Jeff Huber, "Context Rot: How Increasing Input Tokens Impacts LLM Performance," Chroma Technical Report (2025).
  3. Nelson F. Liu et al., "Lost in the Middle: How Language Models Use Long Contexts," Transactions of the Association for Computational Linguistics 12 (2024): 157–173.
  4. Carlos E. Jimenez et al., "SWE-bench: Can Language Models Resolve Real-World GitHub Issues?," ICLR (2024).