AgentStack
Browse Sign in
Browse Why AgentStack Sell Docs
Sign in
SKILL verified MIT Self-run

Skill Evaluator

skill-firstp1ck-pi-coding-agent-forge-skill-evaluator · by Firstp1ck

Evaluate Pi and Agent Skills packages for frontmatter validity, routing description quality, required workflow/safety/verification sections, referenced scripts, destructive-command safeguards, optional routing fixtures, and runnable tests. Use when reviewing, enabling, publishing, or quality-gating skills.

No reviews yet
0 installs
9 views
0.0% view→install

Install

$ agentstack add skill-firstp1ck-pi-coding-agent-forge-skill-evaluator

✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.

Security review

✓ Passed

No issues found. Passed automated security review. · v0.1.0 How review works →

  • Prompt-injection patterns
  • Secret / credential exfiltration
  • Dangerous shell & filesystem operations
  • Untrusted network calls
  • Known-malicious package signatures

What it can access

  • Network access No
  • Filesystem access No
  • Shell / process execution No
  • Environment & secrets No
  • Dynamic code execution No

From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.

View the full security report →

Verified badge

Passed review? Show it. Paste this badge into your README, it links to the public security report.

AgentStack Verified badge Links to your public security report.
[![AgentStack Verified](https://agentstack.voostack.com/badges/verified.svg)](https://agentstack.voostack.com/security/report/skill-firstp1ck-pi-coding-agent-forge-skill-evaluator)

Reliability & compatibility

Security review passed
0 installs to date
no reviews yet
16d ago

Declared compatibility

Claude CodeClaude Desktop

Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.

Preview Execution monitoring

We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.

How agent discovery & health will work →
Are you the author of Skill Evaluator? Claim this listing to set pricing, connect Stripe payouts, and keep 70% of every sale.
Sign up to claim

About

Skill Evaluator

When to Use

Use this skill when a user asks to review, validate, publish, enable, or quality-gate Pi skills or Agent Skills-compatible SKILL.md directories.

Good triggers include:

  • "Evaluate this skill before I enable it."
  • "Run a quality gate on all enabled skills."
  • "Check whether this skill has valid frontmatter, safety language, scripts, and tests."
  • "Add or review routing fixtures for skills."

Lifecycle policy

When evaluation informs skill enablement, publishing, pruning, or merge/update decisions, read the bundled package policy at ../../../../references/SKILL-LIFECYCLE-POLICY.md when available.

Workflow

  1. Resolve the target skill path. For one skill, use a SKILL.md file or its parent directory.
  2. Prefer the native Pi tools when available:
  • skill_eval_run for one skill.
  • skill_eval_all for discovered or enabled skills.
  1. Otherwise run the CLI evaluator:

``bash skill_eval_run /path/to/skill/SKILL.md --json-output /tmp/skill-eval.json --markdown-output /tmp/skill-eval.md ``

  1. For all skills in an explicit root without reading user Pi settings, run:

``bash skill_eval_all --no-settings --skill-root /path/to/skills --json-output /tmp/skill-eval-all.json --markdown-output /tmp/skill-eval-all.md ``

For active-environment coverage, pass the target Pi agent directory explicitly:

``bash skill_eval_all --enabled-only --agent-dir /path/to/pi-agent-dir --json-output /tmp/skill-eval-all.json --markdown-output /tmp/skill-eval-all.md ``

  1. Treat JSON as the machine-readable source of truth and Markdown as the human review report.
  2. Fix blocking failures before enabling, publishing, or depending on the skill. Warnings are not blocking but should be reviewed.
  3. If the user asks for test conventions, read references/TEST-CONVENTIONS.md.

Verification

Use the package test suite after modifying the evaluator:

cd /vendor/pi-skill-skill-evaluator
npm test

Pilot checks against fixture or installed skills:

skill_eval_run /path/to/skills/repo-explorer/SKILL.md
skill_eval_run /path/to/skills/patch-md/SKILL.md
skill_eval_run /path/to/skills/learnings/SKILL.md

Safety and Failure Modes

  • The evaluator is read-only for skill source files.
  • Running bundled skill tests can execute code from the target skill. Use --skip-tests for untrusted third-party skills or inspect tests first.
  • Destructive command checks are heuristic. Treat failures as review gates, not proof of malicious intent.
  • Pi allows skill names to differ from parent directories; the evaluator warns instead of failing on that Agent Skills portability issue.
  • Git or remote package discovery may be incomplete if a package source cannot be resolved to a local install path.

Output Expectations

A successful run returns:

  • JSON with summary, per-skill status, failures, warnings, and info.
  • Markdown with a summary table and per-skill issue details.
  • Exit code 0 when there are no blocking failures.
  • Exit code 1 when one or more blocking failures are present.

Source & license

This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.

Install and usage instructions live in the source repository linked above.

Reviews

No reviews yet, be the first.

Versions

  • v0.1.0 Imported from the upstream source.