When Skills Tell Agents Not to Ask: Oversight Directives Study

# When Skills Tell Agents Not to Ask: Oversight Directives Study

https://gcdradar.vercel.app/incidents/when-skills-tell-agents-not-to-ask-oversight-directives-stud · AIR-2026-1686 · closed 2026-11-13

- Lane: Research
- Severity: 1 (Research / proof of concept): Severity 1 research paper demonstrating security risks in agent skill instructions.
- Fix status: Fix status unknown
- First reported: 2026-10-30
- AI role: Attack on AI
- Products: agent skills

## Summary

Researchers conducted a large-scale study on oversight-loosening directives embedded within public LLM agent skills. The findings reveal how copied instructions can silently instruct agents to bypass approval checks and security boundaries.

## What to do

No action recorded; read the sources below and the vendor's advisory.

## Latest updates

- 2026-10-30: When Skills Tell Agents Not to Ask: A Large-Scale Study of Oversight Directives in Agent Skills (https://arxiv.org/abs/2610.37734)

## Sources

- 2026-10-30 arXiv: When Skills Tell Agents Not to Ask: A Large-Scale Study of Oversight Directives in Agent Skills https://arxiv.org/abs/2610.37734

Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.