Install
$ agentstack add skill-epicsagas-epic-harness-critic ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
Critic — Adversarial Proposal Review
> In-loop vs out-of-band. epic-harness forbids external LLM calls from > production, so the reflect loop ships a deterministic critic > (src/evolve/critic.rs) that gates seeding when reward hacking is > suspected. THIS skill is the out-of-band LLM version a meta-agent or > human runs during /evolve review for the cases the deterministic check > cannot catch (non-local effects, manifest/evidence nuance).
When to Trigger
- During
/evolvereview of newly seeded skills - When
reward_hacking_suspectedis true in metrics - After a seesaw-regression round, before re-proposing
Process
1. Gather the proposal + evidence
- Read the evolved skill proposal(s) from this round
- Read the EditManifest (edittype, target, intendedeffect, predicted_impact)
- Read the round's TaskDigests (outcome, failurecategories, evidenceexcerpts)
- Read recent scorehistory dimensionaverages (toolsuccess, outputquality, execution_cost)
2. Falsify the manifest (paper §4.3, Table 9)
For each proposal, ask: does the trace evidence support the predicted_impact?
- If the manifest claims "Lift avgscorewith" but output_quality is regressing → Reject
- If the manifest claims a tool fix but the implicated component shows no change → Warn
- If the evidence corroborates the predicted effect → Approve
3. Reward-hacking cross-check
- Is executioncost rising while outputquality falls across the window?
- Could the skill be gaming a metric (fewer tool calls inflating cost score) rather than improving outcomes?
- If yes, the skill must NOT ship — flag for the rejected buffer.
4. Non-local effect scan
- Will this skill's guard rules conflict with existing skills (overlapping triggers, contradictory rules)?
- Does it interact with shared state (context, memory, control) in a way the manifest didn't account for?
Anti-Rationalization
| Excuse | Rebuttal | Do instead | |--------|----------|------------| | "The score went up, so it works" | Score can rise via metric gaming | Verify the outcome improved, not just the score | | "The seesaw passed, it's safe" | Seesaw is coarse; sub-threshold coupling evades it | Check dimension deltas, not just aggregate pass | | "It's just a prompt tweak" | Prompt edits have non-local effects on shared context | Trace the effect across skills, not just the target |
Evidence Required
- [ ] Manifest's predicted_impact checked against observed dimension deltas
- [ ] rewardhackingsuspected consulted
- [ ] No conflict with ≥1 existing skill demonstrated
- [ ] Verdict (Approve/Warn/Reject) recorded per proposal with reason
Red Flags
- Approving a skill whose only evidence is "score went up"
- Ignoring a falling outputquality because executioncost rose
- Shipping after a seesaw-regression round without explicit justification
- Treating the deterministic critic as sufficient for non-local effects (it is not — it only checks reward hacking + score-claim contradiction)
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: epicsagas
- Source: epicsagas/epic-harness
- License: Apache-2.0
- Homepage: https://crates.io/crates/epic-harness
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.