Skilder: role-scoped capability delivery for governing tool-using LLM agents (arXiv:2609.28693v1)
This arXiv preprint introduces skilder, a framework that packages skills, tools, and instructions into bounded roles delivered to LLM agents via a single MCP server; agents discover required roles and receive capabilities only through learned skills so the server can deterministically enforce access and limits. Evaluation across 13 tasks and six models (10 runs each) found that when agents completed the discovery protocol and issued governed calls, skilder's simulated authorization layer prevented unauthorized tool calls and parameter violations while still allowing dynamic cross-role capability acquisition.