Progressive Skill Discovery Enables Role‑Based Access for Tool‑Using LLM Agents
agents
| Source: ArXiv | Original article
Researchers propose a progressive skill discovery framework that uses role‑scoped access control to safely scale LLM agents across large enterprise toolsets.
A new arXiv pre‑print (arXiv:2609.28693v1, May 2026) proposes a framework called **skilder** that re‑thinks how large‑language‑model (LLM) agents access enterprise tools. The authors – Michael Stettler, Benjamin Girardet, Jonas Canton, Nicolas Corod and the Skilder team – argue that giving an agent unrestricted access to every internal tool inflates context windows, hampers tool selection and creates governance gaps, because policy encoded only in prompts remains probabilistic rather than enforceable.
Skilder tackles the problem by packaging an agent’s capabilities into **roles** that bundle a skill, the associated tools, explicit instructions and usage limits. These roles are delivered through an MCP server, and agents discover the roles they need step‑by‑step, receiving only the tools scoped to the skills they have already learned. The approach turns access control into a deterministic authorization layer: in tests across 13 tasks and six different models, unauthorized tool calls were blocked while the agents retained flexibility to perform their jobs.
The contribution matters because enterprises are increasingly deploying LLM agents for automation, yet safety and compliance concerns have stalled broader adoption. By limiting tool exposure and providing hard constraints, skilder promises to keep context sizes manageable, improve tool‑selection reliability and reduce the risk of accidental policy breaches.
The next steps will reveal whether the framework can be integrated into existing LLM platforms and whether other vendors adopt a similar role‑scoped model. Watch for follow‑up studies that expand the task set, explore real‑world deployments, and for industry announcements that may embed skilder‑style governance into production AI pipelines.
Sources
Back to AIPULSEN