Agent skill · Audited from source
eval-audit
skill · hamelsmu/evals-skillsMIT licenceAudited 22 Oct 2026 · source 4aa6c7c220dd
Is it safe? Yes — SAFE, grade B (89/100). We read this skill's source at commit 4aa6c7c220dd and found no filesystem, network or shell access and no hard-coded secrets. What it does: Audit an LLM eval pipeline and surface problems: missing error analysis, unvalidated judges, vanity metrics, etc. Use when inheriting an eval system, when unsure whether evals are trustworthy, or as a starting point…
Cite
Cite this page
ModelsAtlas. “eval-audit (hamelsmu/evals-skills)”. Retrieved 22 Oct 2026. https://modelsatlas.com/skills/hamelsmu/eval-audit
Trust audit
Audit 0.4.1 · source read 22 Oct 2026
SAFE means nothing in the source contradicts what the skill says it does. Grade B is shared by 13,985 of 14,816 audited skills.
What the source does
- FilesystemNone observedNo reads or writes in the source
- NetworkNone observedNo outbound calls in the source
- ShellNone observedNo commands run in the source
- DependenciesPinnedNothing floats
- SecretsNone foundNo keys in source
Five audit layers
| Layer | What we check | Result | Findings |
|---|---|---|---|
L0 Provenance | Repo owner, licence, archive status, activity | PASS | 0 |
L1 Static source | Secrets, path traversal, supply chain, hidden code | NA | 0 |
L2 Instructions | Prompt injection, authority framing, hidden directives | PASS | 0 |
L3 Inventory | The files and declarations match the source | PASS | 0 |
L4 Sandbox | Run in isolation and watch behaviour | SKIPPED why | 0 |
Gates applied: no behavioural pass.
Findings (0)
No findings at any severity. We re-audit when the source changes.
Audit 0.4.1 · source sha 4aa6c7c220dd · 22 Oct 2026Report an issue or request a re-scan
Provenance
Who published it, and what the verdict is pinned to
- Publisherhamelsmu GitHub userOwner of the repository this skill is read from
- Source folderhamelsmu/evals-skills/skills/eval-auditThe exact folder we audited
- LicenceMITAs the repository states it
- Commit pinned for this verdict4aa6c7c220ddA new audit runs when the source changes
- Repository statusArchivedLast push 66 days ago
- Sandboxed runNot runSkills are read, not executed; layer L4 is skipped
What it tells the agent
Full source on GitHub ↗Its description: Audit an LLM eval pipeline and surface problems: missing error analysis, unvalidated judges, vanity metrics, etc. Use when inheriting an eval system, when unsure whether evals are trustworthy, or as a starting point…
---
name: eval-audit
description: >
Audit an LLM eval pipeline and surface problems: missing error analysis,
unvalidated judges, vanity metrics, etc. Use when
inheriting an eval system, when unsure whether evals are trustworthy, or as a
starting point when no eval infrastructure exists. Do NOT use when the goal
is to build a new evaluator from scratch (use error-analysis,
write-judge-prompt, or validate-evaluator instead).
---
# Eval Audit
Inspect an LLM eval pipeline and produce a prioritized list of problems with concrete next steps.
## Overview
1. Gather eval artifacts: traces, evaluator configs, judge prompts, labeled data, metrics dashboards
2. Run diagnostic checks across six areas
3. Produce a findings report ordered by impact, with each finding linking to a fix
## Prerequisites
Access to eval artifacts (traces, evaluator configs, judge prompts, labeled data) via an observability MCP server or local files. If none exist, skip to "No Eval Infrastructure."
## Connecting to Eval Infrastructure
Check whether the user has an observability MCP server connected (Phoenix, Braintrust, LangSmith, Truesight or similar). If available, use it to pull traces, evaluator definitions, and experiment results. If not, ask for local files: CSVs, JSON trace exports, notebooks, or evaluation scripts.
## Diagnostic Checks
Work through each area below. Inspect available artifacts, determine whether the problem exists, and record a finding if it does.
Prioritize findings by impact on the user's product. Present the most impactful findings first.
### 1. Error Analysis
**Check:** Has the user done systematic error analysis on real or synthetic traces?
Look for: labeled trace datasets, failure category definitions, notes from trace review. If evaluators exist but no documented failure categories, error analysis was likely skipped.
**Finding if missing:** Evaluators built without error analysis measure generic qualities ("helpfulness", "coherence") instead of actual failure modes. Start with `error-analysis`, or `generate-synthetic-data` first if no traces exist.
See: [Your AI Product Needs Evals](https://hamel.dev/blog/posts/evals/index.html), [LLM Evals FAQ](https://hamel.dev/blog/posts/evals-faq/)
**Check:** Were failure categories brainstormed or observed?
Generic labels borrowed from research ("hallucination score", "toxicity", "coherence") suggest brainstorming. Application-grounded categories ("missing query constraints", "wrong client tone", "fabricated property features") suggest observation.
**Finding if brainstormed:** Generic categories miss application-specific failures and produce evaluators that score well on paper but miss real problems. Re-do with `error-analysis`, starting from traces.
See: [Who Validates the Validators?](https://arxiv.org/abs/2404.12272)
### 2. Evaluator Design
**Check:** Are evaluators binary pass/fail?
Flag any that use Likert scales (1-5), letter grades (A-F), or numeric scores without a clear pass/fail threshold.
**Finding if not binary:** Likert scales are difficult to calibrate. Annotators disagree on the difference between a 3 and a 4, and judges inherit that noise. Consider converting to binary pass/fail with explicit definitions using `write-judge-prompt`.
See: [Creating an LLM Judge That Drives Business Results](https://hamel.dev/blog/posts/llm-judge/)
**Check:** Do LLM judge prompts target specific failure modes?
Flag any that evaluate holistically ("Is this response helpful?", "Rate the quality of this output").
**Finding if vague:** Holistic judges produce unactionable verdicts. Each judge should check exactly one failure mode with explicit pass/fail definitions and few-shot examples. Use `write-judge-prompt`.
**Check:** Are code-based checks used where possible?
Flag LLM judges used for objectively checkable criteria: format validation, constraint satisfaction, keyword presence, schema conformance.
**Finding if over-relying on judges:** Replace objective checks with code (regex, parsing, schema validation, execution tests). Reserve LLM judges for criteria requiring interpretation.
**Check:** Are similarity metrics used as primary evaluation?
Flag ROUGE, BERTScore, cosine similarity, or embedding distance used as the main evaluator for generation quality.
**Finding if present:** These metrics measure surface-level overlap, not correctness. They suit retrieval ranking but not generation evaluation. Replace with binary evaluators grounded in specific failure modes.
See: [LLM Evals FAQ](https://hamel.dev/blog/posts/evals-faq/)
### 3. Judge Validation
**Check:** Are LLM judges validated against human labels?
Look for: confusion matrices, TPR/TNR measurements, alignment scores. Judges in production with no validation data is a critical finding.
**Finding if unvalidated:** An unvalidated judge may consistently miss failures or flag passing traces. Measure alignment using TPR and TNR on a held-out test set. Use `validate-evaluator`.
See: [Creating an LLM Judge That Drives Business Results](https://hamel.dev/blog/posts/llm-judge/)
**Check:** Is alignment measured with TPR/TNR or with raw accuracy?
Flag "accuracy", "percent agreement", or Cohen's Kappa as the primary alignment metric.
**Finding if using accuracy:** With class imbalance, raw accuracy is misleading: a judge that always says "Pass" gets 90% accuracy when 90% of traces pass but catches zero failures. Use TPR and TNR, which map directly to bias correction. Use `validate-evaluator`.
**Check:** Is there a proper train/dev/test split?
Check whether few-shot examples in judge prompts come from the same data used to measure judge performance.
**Finding if leaking:** Using evaluation data as few-shot examples inflates alignment scores and hides real judge failures. Split into train (few-shot source), dev (iteration), and test (final measurement). Use `validate-evaluator`.
### 4. Human Review Process
**Check:** Who is reviewing traces?
Determine whether dExcerpt, first 6,000 characters of SKILL.md, verbatim from the audited commit. It is text from someone else’s repository, quoted so you can judge it before your agent reads it.
Install
Pinned to the audited commit 4aa6c7c
git clone https://github.com/hamelsmu/evals-skills git -C evals-skills checkout 4aa6c7c220dd
The author documents no install command, so this uses the repository directly. Our verdict covers commit 4aa6c7c220dd only.
Works in
The author has not said which agents this skill supports, and we have not tested it in any.
Audit history
Every audit, every source change
- ✓SAFE B 89 / 100
first audit · source
4aa6c7c220dd
README badge
For maintainers · shows the latest audit
[](https://modelsatlas.com/skills/hamelsmu/eval-audit/)
The badge shows our verdict and grade for this skill, and links back to this page. It changes when the audit does.
Similar skills
obra/superpowers
Use when about to claim work is complete, fixed, or passing, before committing or creating PRs - requires running verification commands and confirming output before making any success claims; evidence before assertions…
obra/superpowers
Use when you have a spec or requirements for a multi-step task, before touching code
obra/superpowers
Use when starting any conversation - establishes how to find and use skills, requiring skill invocation before ANY response including clarifying questions
Add this badge to your README
[](https://modelsatlas.com/skills/hamelsmu/eval-audit/)
<a href="https://modelsatlas.com/skills/hamelsmu/eval-audit/"><img src="https://modelsatlas.com/skills/hamelsmu/eval-audit/badge.svg" alt="ModelsAtlas: SAFE B"></a>
Questions about eval-audit
What does the eval-audit skill do?
Is eval-audit safe to install?
What can eval-audit access on my machine?
How current is this page?
Sources
- github.com/hamelsmu/evals-skills/tree/main/skills/eval-audit — the audited source at commit 4aa6c7c220dd and every finding aboveObserved · 22 Oct 2026
Spotted something wrong? Report a correction · Methodology
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What does the eval-audit skill do?
- Is eval-audit safe to install?
- What can eval-audit access on my machine?