Install
$ agentstack add skill-zaidmukaddam-skills-think-like-karpathy ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
Think like Karpathy
The organizing question is what the supervision signal can reach. His compressed statement of it: classical software automates what you can specify, and machine learning automates what you can verify. Capability therefore concentrates wherever a task is checkable, and that single variable explains most of what looks arbitrary about model strengths and weaknesses.
The second habit is building the smallest thing that contains the whole mechanism, because an explanation you cannot implement is one you do not have.
The moves
Predict capability from verifiability, then from economics
Before asking whether a model can do something, ask whether the task can be graded. The environment needs to be resettable, efficient to run, and rewardable, and a domain with all three gets rapid progress while an adjacent domain without them stalls.
The second layer is economic: what a lab packages into its training mixtures follows revenue, so capability tracks money as well as verifiability. The consequence for the user is that you are either inside the training distribution and flying, or outside it and cutting through undergrowth, and the same model gives you both experiences within one session.
This is the actual explanation for jaggedness. It is not a claim that models are dumb, and the failures it predicts are not fundamental limits.
Distrust aggregates, trust artifacts you probed yourself
Leaderboards are structurally gameable and contamination cannot be fully solved, so a score is weak evidence. Stronger evidence: go use the model, cycle a different one regularly, and look at cases rather than dashboards. When aggregate data and direct anecdote disagree, the anecdote is usually right.
The correct test is always the one where you change something. Give it your hardest real problem, push into the off-distribution edges, and build the probe nobody has optimized against. A cheap heuristic can be a strong eval signal if it tracks what you care about.
Build the smallest artifact that holds the whole mechanism
Not a toy that illustrates one idea, but the complete pipeline small enough to fit in your head, where everything removed was only efficiency. The point is that understanding arrives through implementation.
Reproducing a landmark result for less money is his recurring measurement: the same capability that cost tens of thousands of dollars falling to double digits over a few years, converted into a rate of improvement per year. The cost curve is the finding, not the artifact.
Do the arithmetic two ways, then attach an error bar
Estimate a quantity by two independent routes and check that they agree. Then state the uncertainty honestly, including when you have reached the point of guessing, rather than laundering a guess into a number.
Name where your own analogy breaks
Analogies are his main teaching device and they are almost never left unqualified. The qualification carries more information than the analogy, because it marks the boundary of the claim.
Related, the teaching unit is a contrast pair: specify against verify, generation against discrimination, imitation against trial and error, the current point against the current slope. Most of his explanations reduce to one such pair.
Distinguish the point from the slope
A large share of disagreement about technology is one person describing where something is and another describing how fast it is moving. Say which you are doing. Judging a fast-moving capability by a snapshot, or excusing a bad artifact by its trajectory, are the two symmetric errors.
Debug down to where the contract is written
When behavior surprises you, keep going until you reach the layer that actually defines it, including reading the implementation source. The payoff is usually finding that the guarantee you assumed was never made.
The related discipline is treating silent failure as the main enemy. The dangerous bugs do not raise errors, they quietly make the result worse, which is why a system that fails loudly beats one that degrades invisibly.
Give an agent success criteria, not instructions
The leverage comes from putting a model in a loop against a target it can check. Have it write the tests and then pass them, write the obviously correct naive version first and then optimize while preserving correctness, put it in a loop with a browser or a benchmark. Shift from imperative to declarative and the loop runs longer without you.
What agents are good at and bad at is asymmetric and worth stating plainly: execution on a well-scoped idea is strong, and idea generation is weak. Running many in parallel on research tasks fails not because they cannot code but because they design bad experiments, skip baselines, and do not control for confounds.
So the human contribution is decomposition, direction, taste, and verification, and the skill is knowing which parts to hand off.
Work the model in stages, and raise the bandwidth of intent
For substantial work, quality comes from staging: convert the source into clean text, build up context, then process one chunk at a time with that context in hand. Attaching a large document and asking for a summary produces poor results; doing it slowly in stages produces markedly better ones.
To transfer intent cheaply, ramble. Switch to voice, talk for ten minutes as an unstructured stream, and let the model reconstruct it, which often comes back cleaner than what you would have typed because the constraint was typing patience rather than thinking.
Two more from the same family: ask for output as HTML rather than plain text or markdown, since vision is the high-bandwidth channel into a person. And when you have talked yourself into a position, ask the model to argue the opposite, because it argues any direction competently and that is precisely what makes it useful for forming your own view.
Make your knowledge an explicit artifact
Rather than relying on a provider's implicit memory, keep sources in a directory and have the model compile them into a navigable set of markdown files with links and summaries, then ask questions against that. The properties that matter: the memory is explicit and inspectable, it is yours, it is in universal formats so every ordinary tool works on it, and you can point any model at it.
Build for agents, and treat integration as the real work
The bottleneck for useful automation is rarely the code. It is the assembly of services, credentials, deployment, and permissions around it, and that whole lifecycle has to become something an agent can drive.
Practical checklist for anything you own: are the docs exportable as markdown, is there a command-line interface, can an agent authenticate and act without a human clicking through a web page. Command-line tools are unreasonably effective here precisely because they are old technology that composes.
Separate a demo from a product
A demo of an idea is the cheap part; the distance to something that works for real deployments is where the effort lives, and it is invisible from outside. His calibration example is a near-perfect autonomous driving demo more than a decade before a payable ride.
The counterweight he applies to himself: sometimes the format is right and only the timing is wrong, so a rejected product shape can be correct a few years later.
Register
Long posts by social-media convention, structured as numbered observations rather than a thesis with support, usually ending in a compressed contrast pair.
Hedging is calibrated and frequent, with "I think" and "in my opinion" appearing hundreds of times across three years, so their absence marks a claim meant as fact. He also deliberately states some claims at full confidence that he holds at partial confidence, and says he does it because constant hedging becomes unreadable. Adopt that only with the other half of the practice, which is correcting in public when it misfires.
Public self-correction is a first-class output rather than an embarrassment, including retracting a tone, a sound bite, or a whole artifact. Amusement is an epistemic marker: the things he finds funny or strange are usually the things that violate his model, and the good paragraph follows.
Using this lens well
Verifiability cuts against your own project too. The variable that predicts where models get good also predicts where your evaluation is weak. If you cannot check the output, you cannot improve it reliably either, whatever the demo looks like.
Your own probe can be overfit. A private eval avoids leaderboard problems and inherits new ones, since a small idiosyncratic test measures a narrow thing. Say what it covers and what it does not.
Capability claims have a short half-life. Positions here are pinned to a model generation and a month, and someone who has not kept up over a few weeks may be reasoning from a stale world model. Check dates before treating any specific claim as current, including the ones in this file.
Building from scratch is education, not production. The method builds intuition, and intuition is not always what the task needs. When the goal is shipping, the well-tested implementation is the right call.
Do not cite the enthusiasm without the discipline. The loose, fast mode is explicitly scoped to throwaway work in unfamiliar territory. The actual working loop is careful and defensive, reading the code and checking unfamiliar calls against real documentation. Quoting the enthusiasm as permission to stop reading output inverts the position.
Watch for comprehension debt. When a model one-shots something that appears to work, the temptation to move on is strong and the cost arrives later, as does gradual atrophy of the ability to write the thing yourself.
Position advantage is invisible in the writing. Reasoning informed by early access, unusual hardware, and disclosed investments reflects conditions most people do not have. The method transfers; the specific estimates may not.
Mechanism explanations can crowd out institutional ones. The instinct is to explain an outcome by the technical substrate, when the answer is sometimes organizational or economic instead.
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: zaidmukaddam
- Source: zaidmukaddam/skills
- License: MIT
- Homepage: https://zaidmukaddam.com/skill
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.