Install
$ agentstack add skill-bcgen-skills-skill-testing ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
Skill Testing
Prove a skill still does what its SKILL.md says — by running it blind and checking the result mechanically. The discipline is the whole point: execution and verification never share knowledge.
Step 1 — Identify the target
Collect: the target skill name/path, the input (URL, file path, transcript, topic), and the output location if it writes files. Ask only if these are unclear.
Step 2 — Execute with a minimal-prompt subagent
Dispatch a fresh-context subagent (in Claude Code, the Agent tool). Its prompt contains ONLY: the target skill reference, the input, and the output path. See [references/execution.md](references/execution.md) for the exact template and sandbox setup.
Forbidden in the prompt: the target's rules, field names, formats, examples, banned words, categories, or any expected result. Restating them tests your prompt, not the skill.
Step 3 — Extract mechanical rules from the target's own docs
Read the target SKILL.md and every file it transitively references. From those — never from memory or the user's prompt — extract checkable rules and classify each (details and judgment rules in [references/verification.md](references/verification.md)):
- must-contain: a string/structure must appear →
grep -c > 0 - must-omit: a string must not appear →
grep -c == 0 - count: X must equal a sum → arithmetic compare
- format: IDs/links/fields match a regex → regex check
A rule is verifiable only if grep/regex/count/diff settles it. Rules needing semantic judgment ("is the wording clear") are recorded as not-verified, not guessed.
Step 4 — Run the checks
Run each check against the Step 2 output; record pass/fail with expected vs actual. For stateful skills use the sandbox proofs in [references/execution.md](references/execution.md) (isolated dir with declared preseeds; git-based zero-diff idempotency proof; additions-only diff).
Step 5 — Three-part report
- Execution summary — what the subagent reported back.
- Mechanical results — passed N / failed M; for each failure the
source rule, expected, and actual; overall verdict.
- Not mechanically verified — the rules skipped in Step 3, so the user
knows what still needs a human eye.
Principles
| Principle | Meaning | | --- | --- | | Two roles, no shared knowledge | The subagent runs; the main session verifies. Neither sees the other's rules. | | SKILL.md is the only source of truth | Checks come from the target's docs, not your memory or the user's prompt. | | Failure beats a pass | A pass only means the checked rules held; a failure always means the skill or its SKILL.md has a real gap. | | Repeatable | Same (skill, input) must yield the same mechanical verdict; if not, the SKILL.md is underspecified. |
Passing ≠ good — it means the mechanically-checkable rules held. Flag the rest for human review.
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: BCGen
- Source: BCGen/skills
- License: MIT
- Homepage: https://skills.sh/BCGen/skills
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.