Agent-skills research didn't exist before 2023 — and its fastest-growing direction today is security
Field report · Mike Arbuzov · SkillFed Research ·
AI-assisted notes · reviewed by SkillFedA SkillFed field map of 364 agent-skills papers, 2016–2026: none of this work existed before 2023, and skill security went from nothing to the second-fastest-growing direction in about three quarters.
We harvested, classified, and mapped 364 research papers on agent skills — the reusable, shareable instruction files that let AI agents do specialized work — reaching back to October 2016. The first thing the map shows is an absence: before 2023, essentially none of this literature existed. Not one paper in our corpus framed skills the way today's agent builders do until 2023, when the first handful appeared and, by that year's third quarter, first outnumbered the older robotics-and-reinforcement-learning work they grew out of — a thin 3-to-2 crossing.
From there the field bloomed. Today it resolves into five recognizable directions. Three are accelerating fast: skill evolution — agents that generate and govern their own skill libraries — leads at +5.1 papers per quarter; skill retrieval climbs at +1.7; and the breakout is skill security, which went from nothing before mid-2025 to the second-fastest-growing direction, +2.8 papers per quarter, in about three quarters. A fourth direction, robotic skill learning, has grown steadily since 2016 (+1.0 per quarter); a fifth, agentic benchmarks, is only months old. And the field still remembers where it came from: of the in-corpus citations we could resolve from agent-skills papers, 55% still point back to the robotics and RL roots.
The five directions
Clustering the 364 embedded papers yields six directions; we name and chart the five that sit on the agent-skills spine. Growth is new papers per quarter, from a linear fit over the direction's most recent quarters.
| Direction | Born | Papers | Growth /q | Trajectory |
|---|---|---|---|---|
| Skill evolutionAgents that generate, evolve, and govern their own skill libraries. | 2025-Q2 | 65 | +5.1 | accelerating |
| Skill securityAttacks on, and defenses for, agent skill files — malicious skills, injection, threat taxonomies. | 2025-Q3 | 40 | +2.8 | accelerating |
| Skill retrievalFinding and routing the right skill from a large library at inference time. | 2025-Q2 | 22 | +1.7 | accelerating |
| Robotic skill learningThe pre-LLM roots: goal-conditioned RL, self-supervised exploration, imitation, manipulation. | 2016-Q4 | 95 | +1.0 | enduring |
| Agentic benchmarksA 2026-born cluster of autonomous-agent benchmarks and evaluation harnesses. | 2026-Q1 | 21 | — | too new |
Agentic benchmarks is only three quarters old — too young for a meaningful growth slope, so we leave it blank. A sixth cluster, an older and now-dormant strand of general LLM-training work, sits off the agent-skills spine; we fold it into the field's undifferentiated core rather than call it a direction. One more caution when comparing against the rest of this site: the SkillFed research directory tags each of its 191 notes with a direction from a separate per-paper classification (evolution, security, retrieval, benchmarks); this map's clusters are computed independently over the full 364-paper corpus, so the names overlap but the counts differ.
Key numbers
| Agent-skills papers before 2023 | 0 |
| When LLM-skills work first outpaced robotics | 2023-Q3 |
| Papers in the field map | 364 |
| Steepest-growing direction (skill evolution) | +5.1/q |
| Skill security, from a standing start | +2.8/q |
| Share of papers mapped into clear directions | 71.2% |
How we made this — and what it can't tell you
We built the map in four steps. Starting from two 2026 survey papers, we crawled outward through citations to assemble 364 papers; classified each as core, adjacent, or off-topic (191 / 123 / 50) and tagged its domain (251 agent-skills, 44 robotics, 19 RL theory, 50 other); embedded every abstract; then clustered the embeddings into six directions, with 71.2% of papers falling into a clear cluster and the rest left as an undifferentiated core. Three limits matter, and we want them in plain view.
- This is a map of when work was published, not of influence. A paper's distance from the center is its publication date, not citations it has gathered over time. A 2026 paper sits near the rim because it is new — not because it is unproven or overlooked.
- The 2026 surge is over-sampled. Because our crawl began at two 2026 surveys and followed citations, recent work is over-represented: 2026 is 68% of the corpus (248 of 364), and 2025–2026 together are 76%, versus under 10% (36 papers) before 2023. The shape of the story — 2016 robotics roots, 2023 ignition, 2026 surge — is robust, because it rests on publication dates and domain tags rather than on the crawl. The magnitude of 2026 is not a census. We could not run the intended cross-check either: the corpus's citation graph is too sparse to trace papers back to the seed surveys, so we bound the bias with the year skew above and report it openly.
- Small samples make fine detail noisy. Several directions have only a few papers per quarter, so quarter-to-quarter wiggles are not meaningful. Growth measured over several quarters is the signal we trust; anything finer, we don't.
More from SkillFed Research
- Insight ·
Any AI chat can now run skill search — and you approve every request
No install, no account, no connector. Your chat writes an abstract wish, you paste the link back, and it reads five security-swept skills. The whole request is a URL in plain English — the privacy boundary is something you check, not something you're asked to trust.
- Field report ·
61 findings on a site we built for SEO
A site with build-blocking structured-data lints, machine-readable mirrors and an enforced internal-linking floor still failed 61 checks drawn from the SEO skills our own editorial recommends — including FAQPage markup that same post called retired. 19% of the skills' criteria were stale too.
- Insight ·
60,611 skills in the wild — what a full census of the public SKILL.md corpus shows
SkillFed walked all 6,177 repositories in its discovery queue end to end: 2.5× more unique skills than listings claimed, 13,122 per-agent variant files merged, and 86,956 vendored aggregator copies excluded — more copies than originals.
- Insight ·
The largest direction in agent-skill research is spreading outward, not settling down
Papers on agents that write their own skills land steadily farther from the direction's own semantic center month over month — the only trend in our analysis that survives multiple-comparison correction (BH p = 0.0016) — with no single axis carrying the drift.
- Insight ·
Zero of 184 recent papers connect skill self-authoring with skill security
Five of the six research-direction pairs in the recent agent-skill literature are bridged by dual-topic papers. The pair formed by its two largest directions — agents authoring their own skills, and securing skill files — is empty, and three null models say that is not chance.