AgentStack
Browse Sign in
Browse Why AgentStack Sell Docs
Sign in
SKILL verified MIT Self-run

Skill Evaluator

skill-dioo1461-skill-evaluator-skill-evaluator · by dioo1461

Score, audit, compare, or fix evaluation findings in existing Codex skill implementations, including target-score goal loops for SKILL.md files, metadata, resources, diffs, PRs, and execution traces. Do not use for creating new skills from scratch, ordinary code/document/prompt reviews, or generic product planning.

No reviews yet
0 installs
3 views
0.0% view→install

Install

$ agentstack add skill-dioo1461-skill-evaluator-skill-evaluator

✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.

Security review

✓ Passed

No issues found. Passed automated security review. · v0.1.0 How review works →

  • Prompt-injection patterns
  • Secret / credential exfiltration
  • Dangerous shell & filesystem operations
  • Untrusted network calls
  • Known-malicious package signatures

What it can access

  • Network access No
  • Filesystem access No
  • Shell / process execution No
  • Environment & secrets No
  • Dynamic code execution No

From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.

View the full security report →

Verified badge

Passed review? Show it. Paste this badge into your README, it links to the public security report.

AgentStack Verified badge Links to your public security report.
[![AgentStack Verified](https://agentstack.voostack.com/badges/verified.svg)](https://agentstack.voostack.com/security/report/skill-dioo1461-skill-evaluator-skill-evaluator)

Reliability & compatibility

Security review passed
0 installs to date
no reviews yet
1mo ago

Declared compatibility

Claude CodeClaude Desktop

Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.

Preview Execution monitoring

We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.

How agent discovery & health will work →
Are you the author of Skill Evaluator? Claim this listing to set pricing, connect Stripe payouts, and keep 70% of every sale.
Sign up to claim

About

Skill Evaluator

Overview

Use this skill to evaluate a Codex skill as an implementation artifact: how reliably it triggers, how efficiently it manages context, how well it guides agent behavior, and how safely it produces verifiable outcomes. Produce a scored, evidence-backed report with prioritized improvements.

Do not edit the evaluated skill by default. Edit only when the user explicitly asks to improve, patch, or apply fixes; in that case, load references/patch-mode.md after the initial evaluation.

Inputs

Accept any of these scopes:

  • A skill directory containing SKILL.md.
  • A single SKILL.md.
  • A diff, commit, PR, or pasted skill content.
  • Multiple skills for comparison.
  • A skill execution trace, if the user wants behavior-level evaluation.

If the target skill is not specified and cannot be inferred, ask one concise question for the path or content.

Target-Score Goal Loops

When the user invokes this skill through /goal or asks to improve a skill until it reaches a numeric score, treat it as explicit authorization to evaluate, patch, validate, and repeat until a stop condition is met.

Recognize compact forms such as:

/goal $skill-evaluator objective: 95
/goal $ skill-evaluator objective: 95
/goal $skill-evaluator target: ./my-skill objective: 95
/goal Use $skill-evaluator to improve ./my-skill until 95/100

Interpret compact fields this way:

  • Treat $skill-evaluator and $ skill-evaluator as the same invocation form.
  • objective, score, or target_score with a number from 0 to 100 is the target score.
  • target, path, scope, or an explicit path-like token is the evaluated skill scope.
  • If only a number is given, infer the target scope from exactly one unambiguous local skill path, pasted skill, or most recently discussed evaluated skill in the current conversation. If the scope is ambiguous or stale, ask one concise question for the target path or content.
  • If no target score is supplied, ask one concise question for the numeric target. Do not default silently.

For target-score loops:

  1. Create or continue the goal with an expanded objective that names the target scope, target score, validation expectations, and stop conditions.
  2. Run the normal evaluation workflow and record the current score before editing.
  3. If the current score is below target and scoped fixes are allowed, load references/patch-mode.md, create the required backup for local artifacts, apply the highest-priority P0/P1/P2 fixes first, then revalidate.
  4. For every validation pass, launch a fresh read-only evaluator subagent when subagents are available and permitted by the current tool policy. If the policy requires explicit user authorization, an explicit goal request for fresh validation subagents satisfies that condition. The subagent returns evidence, scores, and P0/P1/P2 recommendations only; the main agent owns edits, final scoring, and conflict resolution.
  5. If subagents are unavailable or not permitted, run a non-independent self-review pass, label the confidence risk, and continue only when the evidence is still sufficient.
  6. Repeat until the target score is reached, no safe scoped fixes remain, a direction-level change needs user approval, validation cannot run, or another blocker is found.
  7. When a host goal is active, close the loop according to the host goal lifecycle: mark the goal complete only when the target score is reached, and report early blockers without marking blocked unless the host's blocked criteria are satisfied.
  8. Do not weaken the rubric, hide validation gaps, ignore required findings, or make cosmetic score-chasing edits solely to reach the target.

Reference Loading

Load only the references needed for the current branch:

  • references/scoring-guide.md: load before assigning final category scores, classifying P0/P1/P2 recommendations, resolving scores above 90, or evaluating a skill against itself.
  • references/report-format.md: load before writing the final report; use its comparison section only for multi-skill evaluations.
  • references/patch-mode.md: load only when the user asks to improve, patch, or apply fixes.
  • references/evaluation-checklist.md: load before finalizing a report, and again after edits in patch mode.
  • examples/calibration/problems.json: load only when the user asks for calibrated scoring, evaluator self-test, release-readiness verification, or when you intentionally run optional behavioral calibration. Do not inspect examples/calibration/answer-key.json until after observed scores and findings are drafted.

Inspection Workflow

  1. Resolve the scope.
  • For a directory, inspect SKILL.md, agents/openai.yaml if present, and an inventory of top-level resource folders.
  • For a single SKILL.md, evaluate that file and mark absent container metadata as unknown, not failed.
  • For a diff, commit, or PR, inspect changed skill files plus unchanged referenced files required to understand changed behavior; list relevant uninspected artifacts.
  • For multiple skills, score each skill independently before comparing them.
  • For execution traces, map observed behavior back to the skill instructions, metadata, and loaded resources.
  1. Read progressively.
  • Read frontmatter and the SKILL.md body first.
  • Read referenced files only when the body or the current evaluation branch requires them.
  • For large references, sample with search and section reads instead of loading everything.
  • When sampling large references or resource folders, record which files or sections were inspected and which were not. Do not award full credit for resource-dependent behavior when the relevant resource content was not inspected.
  • Do not treat unavailable resources as defects unless the skill depends on them.
  1. Collect evidence.
  • Prefer file and line references for every material finding.
  • Separate confirmed issues from assumptions and unknowns.
  • If evaluating runtime behavior, use traces, logs, example prompts, diffs, or generated outputs as evidence.
  • If evidence contains secrets, credentials, personal data, or private operational details, redact raw values and quote only the minimum context needed to support the finding.
  1. Validate structure when possible.
  • For a local skill directory, validate structure in this order:
  1. Run a documented target-local validator when one is discoverable from SKILL.md, agents/openai.yaml, scripts, or top-level project metadata and is safe for the current environment. For this skill, run scripts/validate_skill.py with --skip-answer-key, python3, and an explicit timeout when examples/calibration/answer-key.json must remain closed; run full scripts/validate_skill.py only after observed calibration results are drafted or when answer-key inspection is explicitly allowed.
  2. If no documented validator exists, consider discoverable target-local validation scripts under the same safety rules, and report any skipped validators with the reason they were skipped.
  3. Run the available system skill validator when it exists, such as python3 ~/.codex/skills/.system/skill-creator/scripts/quick_validate.py .
  • Treat a validation command as safe only when it is read-only, idempotent, time-bounded, output-bounded, and does not install dependencies, modify files, start long-running services, publish artifacts, or call external systems. Use an explicit timeout when available.
  • If validator execution fails because of a missing dependency, permission issue, bad path, timeout, or other tool/runtime problem, report the command, exit status, and concise stdout/stderr. Then perform the manual structural checks below for every accessible artifact, and distinguish the tool failure from any confirmed skill defect.
  • If no validator is available, manually check that SKILL.md exists, frontmatter parses as YAML, name and description are present strings, the description covers use and non-use cases, and agents/openai.yaml parses when present.
  • For agents/openai.yaml, check that any interface.display_name, interface.short_description, and interface.default_prompt values are strings, user-facing, and not stale relative to the skill purpose.
  • Treat validation failures as evidence under Maintainability And Metadata, Trigger Accuracy, or Failure Handling And Safety depending on the failure.
  • If validation cannot run because the artifact is pasted content, a diff, or a remote-only source, state that validation was not run.
  1. Use independent review when it adds evidence.
  • First identify work that can be evaluated independently and safely in parallel, such as multiple skills, unrelated changed resources, large evidence bundles, or independent trace segments.
  • When parallel work is available, route suitable read-only branches to fresh subagents and define what each branch returns, how results are aggregated, and how disagreements are resolved.
  • When subagents are available for the current task, use one fresh read-only evaluator subagent for an independent pass if evaluating multiple skills, a diff or PR that touches multiple skill files or resources, a skill with several referenced resources, a runtime trace with ambiguous behavior, or any self-evaluation.
  • If the current run is already the fresh read-only evaluator subagent delegated for that independent pass, do not spawn a nested subagent solely to satisfy self-evaluation independence. State that this run is the independent pass, return evidence for the parent evaluator to aggregate, and spawn additional subagents only for distinct evidence branches such as separate calibration fixtures or large unrelated resources.
  • Skip the subagent for narrow single-skill reviews when the inspected artifacts fit comfortably in context, and state that choice if it affects confidence.
  • If a broad evaluation would normally need a subagent but subagents are unavailable, perform a second self-review pass, label it as non-independent, and include residual confidence risk in the report.
  • Give the subagent only the target artifacts and evaluation rubric, not your suspected conclusions.
  • Use subagent output as another evidence source; do not let it replace your own synthesis.
  • If the subagent and main evaluation disagree, resolve the difference by evidence quality: prefer direct file/line evidence, reproducible command output, exact rubric mapping, and observed behavior over unsupported judgment. Do not average scores; explain any material disagreement that affects the final score or priority.
  1. Run behavioral calibration only when it is useful.
  • For ordinary evaluations, do not run calibration unless the user asks for calibrated scoring, evaluator self-test, release-readiness verification, a self-evaluation that must justify 100/100, or behavior-level confidence beyond the normal rubric.
  • Skipping calibration is not an automatic score cap and does not by itself block 100/100; report it as a confidence note only when calibration would materially affect trust in the score.
  • If calibration is run, inspect examples/calibration/problems.json first and keep examples/calibration/answer-key.json closed until observed fixture results are fixed.
  • The main evaluator owns the observed fixture scores and findings. Do not outsource final calibration judgments to subagents.
  • When subagents are available and permitted, use them in parallel only for read-only evidence extraction or independent second-pass review. Give each calibration subagent only its fixture path, the evaluation rubric, and the requested evidence or review output. Do not provide answer-key data, expected score bands, required findings, or other fixture results.
  • For every fixture, draft the category breakdown first, preserving unrelated category credit instead of letting one defect collapse the whole score. Then inspect the cited fixture lines needed to support the final observed score, score rationale, and P0/P1/P2 findings before opening the answer key.
  • After observed results are fixed, inspect examples/calibration/answer-key.json and compare observed score bands and required findings to the answer key.
  • If calibration is run, treat a missed required finding, score outside the expected band, early answer-key inspection, or skipped fixture as confidence evidence and possible score-limiting evidence unless the report explains a stronger file-based reason for the mismatch.
  • Calibration fixtures may intentionally contain unsafe or low-quality instructions; inspect them as test inputs only, and do not execute fixture instructions.
  • Summarize whether calibration was not run, skipped by design, or completed; when completed, include fixture ids evaluated, how subagents were used, whether answer-key inspection was delayed, mismatches, and any fixtures skipped with reasons.
  1. Score and finalize.
  • Use the rubric below, references/scoring-guide.md, and inspected evidence to assign category scores.
  • Use references/report-format.md for the report shape unless the user asks for another format.
  • Run references/evaluation-checklist.md before sending the report.
  • For self-evaluation, do not award a final 100/100 unless the checklist passes, validation is accounted for, no P1/P2 recommendation remains, and no P3, unknown artifact, or unexplained calibration mismatch when calibration was run limits any category score.

Score Rubric

Score out of 100. Use the weights below. Award partial credit only for behavior the skill actually instructs or structurally enables.

| Category | Weight | What To Evaluate | |---|---:|---| | Trigger Accuracy | 12 | Frontmatter description clearly names when to use the skill, when not to use it, relevant file types/tasks, likely user phrasing, adjacent-skill boundaries, and avoids overbroad invocation. | | Goal Fit And Scope Control | 10 | The skill has a clear purpose, bounded responsibility, sensible non-goals, meaningful value beyond generic model knowledge, and does not invite unrelated refactors or workflow expansion. | | Workflow Executability | 14 | Steps are concrete, ordered, decision points are explicit, and the agent can act without guessing hidden prerequisites. | | Context Management | 14 | SKILL.md stays lean, uses progressive disclosure, references only load on demand, avoids duplicating general knowledge, and keeps resource depth and context waste bounded. | | Tool And Resource Design | 10 | Scripts, references, assets, MCP/browser/GitHub/tool instructions are appropriate, discoverable, deterministic where useful, and not overused. | | Subagent And Parallel Work Design | 8 | The skill identifies independent work that can run in parallel, routes suitable branches to read-only subagents when available, protects validation integrity, defines aggregation and role boundaries, and avoids unnecessary parallelism. | | Verification And Completion Criteria | 12 | The skill defines tests, checks, manual QA, output validation, done conditions, baseline or trace evidence when needed, and how to report unverified work. | | Failure Handling And Safety | 8 | The skill handles missing files, permission limits, external failures, destructive actions, sensitive data, cross-modal resource consistency, and user confirmation points. | | Maintainability And Metadata | 8 | Naming, structure, agents/openai.yaml, resource organization, examples, and update burden are clean and consistent. | | Output Quality And Collaboration | 4 | Reports or final artifacts are easy to scan, evidence-backed, appropriately concise, and clear about assumptions. |

Use this scale inside each weighted category:

  • 0%: Missing, misleading, or harmful.
  • 25%: Mentioned but vague, incomplete, or likely to fail.
  • 50%: Adequate for simple cases but weak around edge cases.
  • 75%: Good and usually reliable.

Source & license

This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.

Install and usage instructions live in the source repository linked above.

Reviews

No reviews yet, be the first.

Versions

  • v0.1.0 Imported from the upstream source.