AgentStack
Browse Sign in
Browse Why AgentStack Sell Docs
Sign in
SKILL verified Apache-2.0 Self-run

Critic

skill-epicsagas-epic-harness-critic · by epicsagas

HarnessX Critic (Tier 2.1) — adversarial review of evolved-skill proposals against trace evidence. Detects reward hacking and manifest/evidence contradictions. Out-of-band LLM counterpart to the in-loop deterministic critic in src/evolve/critic.rs.

No reviews yet
0 installs
33 views
0.0% view→install

Install

$ agentstack add skill-epicsagas-epic-harness-critic

✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.

Security review

✓ Passed

No issues found. Passed automated security review. · v0.1.0 How review works →

  • Prompt-injection patterns
  • Secret / credential exfiltration
  • Dangerous shell & filesystem operations
  • Untrusted network calls
  • Known-malicious package signatures

What it can access

  • Network access No
  • Filesystem access No
  • Shell / process execution No
  • Environment & secrets No
  • Dynamic code execution No

From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.

View the full security report →

Verified badge

Passed review? Show it. Paste this badge into your README, it links to the public security report.

AgentStack Verified badge Links to your public security report.
[![AgentStack Verified](https://agentstack.voostack.com/badges/verified.svg)](https://agentstack.voostack.com/security/report/skill-epicsagas-epic-harness-critic)

Reliability & compatibility

Security review passed
0 installs to date
no reviews yet
2mo ago

Declared compatibility

Claude CodeClaude Desktop

Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.

Preview Execution monitoring

We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.

How agent discovery & health will work →
Are you the author of Critic? Claim this listing to set pricing, connect Stripe payouts, and keep 70% of every sale.
Sign up to claim

About

Critic — Adversarial Proposal Review

> In-loop vs out-of-band. epic-harness forbids external LLM calls from > production, so the reflect loop ships a deterministic critic > (src/evolve/critic.rs) that gates seeding when reward hacking is > suspected. THIS skill is the out-of-band LLM version a meta-agent or > human runs during /evolve review for the cases the deterministic check > cannot catch (non-local effects, manifest/evidence nuance).

When to Trigger

  • During /evolve review of newly seeded skills
  • When reward_hacking_suspected is true in metrics
  • After a seesaw-regression round, before re-proposing

Process

1. Gather the proposal + evidence

  • Read the evolved skill proposal(s) from this round
  • Read the EditManifest (edittype, target, intendedeffect, predicted_impact)
  • Read the round's TaskDigests (outcome, failurecategories, evidenceexcerpts)
  • Read recent scorehistory dimensionaverages (toolsuccess, outputquality, execution_cost)

2. Falsify the manifest (paper §4.3, Table 9)

For each proposal, ask: does the trace evidence support the predicted_impact?

  • If the manifest claims "Lift avgscorewith" but output_quality is regressing → Reject
  • If the manifest claims a tool fix but the implicated component shows no change → Warn
  • If the evidence corroborates the predicted effect → Approve

3. Reward-hacking cross-check

  • Is executioncost rising while outputquality falls across the window?
  • Could the skill be gaming a metric (fewer tool calls inflating cost score) rather than improving outcomes?
  • If yes, the skill must NOT ship — flag for the rejected buffer.

4. Non-local effect scan

  • Will this skill's guard rules conflict with existing skills (overlapping triggers, contradictory rules)?
  • Does it interact with shared state (context, memory, control) in a way the manifest didn't account for?

Anti-Rationalization

| Excuse | Rebuttal | Do instead | |--------|----------|------------| | "The score went up, so it works" | Score can rise via metric gaming | Verify the outcome improved, not just the score | | "The seesaw passed, it's safe" | Seesaw is coarse; sub-threshold coupling evades it | Check dimension deltas, not just aggregate pass | | "It's just a prompt tweak" | Prompt edits have non-local effects on shared context | Trace the effect across skills, not just the target |

Evidence Required

  • [ ] Manifest's predicted_impact checked against observed dimension deltas
  • [ ] rewardhackingsuspected consulted
  • [ ] No conflict with ≥1 existing skill demonstrated
  • [ ] Verdict (Approve/Warn/Reject) recorded per proposal with reason

Red Flags

  • Approving a skill whose only evidence is "score went up"
  • Ignoring a falling outputquality because executioncost rose
  • Shipping after a seesaw-regression round without explicit justification
  • Treating the deterministic critic as sufficient for non-local effects (it is not — it only checks reward hacking + score-claim contradiction)

Source & license

This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.

Install and usage instructions live in the source repository linked above.

Reviews

No reviews yet, be the first.

Versions

  • v0.1.0 Imported from the upstream source.