Fetching from the wire…
Public story · 2026-08-25 · high
Six frontier agents got the official patch notes anyway, and the best one still missed 30% of the stale content.
Why now: Four separate papers on skill-file evaluation surfaced together, and none of them grade skill files the way current libraries do.
Repo2Skill-Evo tested 105 real release transitions across 57 repositories, and every single one broke part of the AI skill file built for it.
For any team keeping a skill file for a dependency, every major version bump has a 100% chance of breaking it, not an occasional edge case.
Skill files work by naming the exact script, API call, or flag a repo needs. That precision is what makes them useful, and a version bump breaks it without anyone noticing.
The Repo2Skill-Evo paper handed six frontier agents the official patch notes explaining what changed, then asked them to repair the stale skill file. The best agent reached 69.7% on a metric that scores catching stale content against over-editing. Even with the diff in hand, it left 30% of the rot in place.
NVIDIA ran a different test the same week. It asked whether grading a skill file's structure predicts whether the skill helps, and the correlation came back at 0.14, per coverage from AINews. Their fix is to run each task twice, once with the skill loaded and once without, and score the difference in completed work.
A third paper, SkillAlchemy, generated skills straight from source material instead of having humans write them. It beat no-skill runs by 19.9 points and reached parity with human-curated skills across 87 tasks.
A fourth study on long-horizon web agents found verified execution experience beat distilled summaries by 8.7 to 15.5 points across seven models.
There's a problem here nobody's solved yet. If skills decay on every release and agents can't reliably repair them even with the diff, a skill library's maintenance cost scales with how often its dependencies change. At some point that costs more than the skills save, and none of the four studies say where that point sits.
Each link below shares sources, entities, or timing with this story.
21 out of 21. Not most. All of them. arXiv 2608.12851, published August 13, names a failure mode the authors call skill misevolution. An agent that learns from its own successful trajectories will turn an unsafe success into reusable policy, and that policy persists after the...
Two thirds. Not two thirds of a contrived jailbreak set. Two thirds of realistic malicious issue requests, against the exact three tools most of the people reading this run daily. Ankur Singh, Jinqiu Yang, and Tse-Hsun Chen built IssueTrojanBench across four attack categories...
Tessl ran 880 evaluations across 9 models with and without agent skills. The result inverts what most teams assume about AI costs. Haiku 4.5, Anthropic's cheapest model at roughly $0.25 per million tokens, scored 84.3% when given a well-crafted agent skill. Opus 4.7, the most...
Stanford's Denisov-Blanch group built a maturity model for AI adoption scored entirely from artifacts already in version control, applied it to 441 repositories, and found something I've been assuming without evidence. RAMP is a four-level model derived only from committed AI...
This one annoyed me, because I've been running the losing pattern. SWE-QA (arXiv 2608.01507) compares the sub-agent grep pattern that Claude Code, Codex and Antigravity all ship by default against a pre-built semantic index over the same repository. Semantic search answered 65...
Lasso Security published research demonstrating that Claude Code's --dangerously-skip-permissions flag enables indirect prompt injection via poisoned READMEs, documentation files, and MCP responses. Then they did something unusual: they released the defense alongside the attac...
MindPattern daily
One email a day at 7 AM. Sources and a take on every story. Unsubscribe anytime.