SkillClone: Multi-Modal Clone Detection and Clone Propagation Analysis in the Agent Skill Ecosystem
Researchers' new AI detects clones in 196K agent skills, finding 75% have duplicates and 40% cross author boundaries.
A research team from Nanyang Technological University and Tsinghua University has published SkillClone, the first tool designed to detect duplicate "agent skills"—the modular instruction packages that power AI assistants. With 196,000 skills now publicly available, the ecosystem has grown without any mechanism to track copying, creating systemic security vulnerabilities where bugs in popular skills silently propagate. SkillClone solves this by using a multi-modal approach that fuses flat TF-IDF similarity with per-channel analysis of YAML metadata, natural language instructions, and embedded code through logistic regression, achieving an F1 score of 0.939 on their custom SkillClone-Bench benchmark.
Applying SkillClone to a dataset of 20,000 skills revealed staggering levels of duplication: 258,000 clone pairs involving 75% of all skills, with 40% of those pairs crossing author boundaries. The analysis shows the agent skill ecosystem is inflated by approximately 3.5 times, with only 5,642 unique skill concepts underlying the entire sampled collection. Furthermore, 41% of skills in clone families were found to be superseded by a strictly better variant, indicating significant redundancy and maintenance overhead. This research provides both a crucial tool for ecosystem health and a stark warning about the risks of unmanaged code reuse in the rapidly expanding world of AI agents.
- SkillClone achieves 0.939 F1 score in detecting multi-modal skill clones, outperforming flat TF-IDF (0.881) by 6.6%
- Analysis of 20K skills found 258K clone pairs, with 75% of skills involved and 40% crossing author boundaries
- The ecosystem contains only 5,642 unique concepts—revealing 3.5x inflation and 41% of cloned skills are obsolete
Why It Matters
Identifies critical security risks in AI agent ecosystems and provides tools to eliminate redundant, vulnerable code clones.