一句话:提出多模态克隆检测器 SkillReuse,在大规模智能体技能生态中发现复制、改名、改写等复用关系。
公共仓库已有超两百万个智能体技能,每个技能通常包含 SKILL.md 中的 YAML 元数据、自然语言指令和可执行代码。现有工具孤立分析单件制品,难以发现复制、改名或改写带来的复用,单通道克隆检测器也容易漏掉跨通道适配。SkillReuse 结合全局词法匹配与 YAML、文本、代码三通道表示,用逻辑回归输出克隆分数和可解释类型。作者构建 SkillReuse-Bench,含 300 对标注样本,覆盖精确复制、改名、改写与语义等价。基准上 F1 为 0.939、精度 0.952,Type-4 语义克隆召回率比 MinHash 高 4.2 倍。对 137,470 个技能运行,发现 106 万克隆对,涉及 66.8% 技能,95.3% 跨作者,并揭示逐技能扫描遗漏的安全相关链接。
An agent skill is a reusable package for extending an LLM agent, typically a SKILL.md file that combines YAML metadata, natural-language instructions, and executable code. Public repositories now host over two million skills, yet existing tools analyze each artifact in isolation, and registries do not track reuse created through copying, renaming, or adaptation. Detecting these links is difficult because reuse may appear in one channel while the others change; conventional single-channel clone detectors can therefore miss such adaptations. We present SkillReuse, a multi-modal clone detector that combines global lexical matching with channel-specific representations for YAML, prose, and code, then uses logistic regression to produce clone scores and interpretable clone-type labels. We also introduce SkillReuse-Bench, an annotated benchmark of 300 skill pairs spanning exact copies, renamed copies, adaptations, and semantic equivalents. On SkillReuse-Bench, SkillReuse reaches an F1 of 0.939 with 0.952 precision, improving over TF-IDF and delivering 4.2× higher recall on Type-4 semantic clones than MinHash. Applied to all 137,470 skills that pass the content filter, SkillReuse identifies 1.06 million clone pairs involving 66.8% of the analyzed skills; 95.3% of these pairs cross author boundaries. Among skills in the analyzed name-based clone families, 67% are superseded by a higher-quality variant. Tracing 938 security-relevant skills through the clone graph surfaces 16,587 clone links spanning 6,376 related skills that per-skill scanners alone would miss.