Agent skill · Audited from source

Bernstein Quality

skill · sipyourdrink-ltd/bernsteinApache-2.0 licenceAudited 14 Oct 2026 · source 6ba64a7d2489

★ 1,237pushed today
!CAUTIONGrade B · 89/100 · 5 findings · 6ba64a7
1,237repo stars · whole sipyourdrink-ltd/bernstein

Is it safe? With care — CAUTION, grade B (89/100). We read this skill's source at commit 6ba64a7d2489 and observed network access and no hard-coded secrets. The audit raised 5 findings, 0 critical or high. What it does: Show quality metrics for Bernstein runs - success rates per model, lint/test pass rates, completion time distributions. Use when the user asks about quality, reliability, which model performs best, or pass rates.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “Bernstein Quality (sipyourdrink-ltd/bernstein)”. Retrieved 14 Oct 2026. https://modelsatlas.com/skills/sipyourdrink-ltd/bernstein-quality

Trust audit

Audit 0.4.1 · source read 14 Oct 2026

Trust score89/100!CAUTION B
0 critical0 high4 medium0 low1 info

CAUTION means the audit found things worth knowing before you trust this skill. Grade B is shared by 13,985 of 14,816 audited skills.

What the source does

  • FilesystemNone observedNo reads or writes in the source
  • NetworkUndeclared4 observations, not in its own description
  • ShellNone observedNo commands run in the source
  • DependenciesPinnedNothing floats
  • SecretsNone foundNo keys in source

Five audit layers

LayerWhat we checkResultFindings
L0 ProvenanceRepo owner, licence, archive status, activityPASS0
L1 Static sourceSecrets, path traversal, supply chain, hidden codeWARN4
L2 InstructionsPrompt injection, authority framing, hidden directivesPASS1
L3 InventoryThe files and declarations match the sourcePASS0
L4 SandboxRun in isolation and watch behaviourSKIPPED why0

Gates applied: no behavioural pass.

Findings (5)

MEDIUMNetwork egressnet.cli · scripts/quality.sh:18
F-04 Network egressCWE-200 · CWE-319Layer L1
curl -sf "${HEADERS[@]}" "$API/quality/metrics" || echo '{"error": "API not reachable"}' >&2
Why
No further detail recorded for this rule.
Fix
—
MEDIUMNetwork egressnet.cli · scripts/quality.sh:21
F-04 Network egressCWE-200 · CWE-319Layer L1
curl -sf "${HEADERS[@]}" "$API/quality/pass-rates" || echo '{"error": "API not reachable"}' >&2
Why
No further detail recorded for this rule.
Fix
—
MEDIUMNetwork egressnet.cli · scripts/quality.sh:24
F-04 Network egressCWE-200 · CWE-319Layer L1
curl -sf "${HEADERS[@]}" "$API/quality/completion-times" || echo '{"error": "API not reachable"}' >&2
Why
No further detail recorded for this rule.
Fix
—
MEDIUMNetwork egressnet.raw_ip · scripts/quality.sh:6
F-04 Network egressCWE-200 · CWE-319Layer L1
API="${BERNSTEIN_API_URL:-http://127.0.0.1:8052}"
Why
No further detail recorded for this rule.
Fix
—
INFOPrompt injectionscope.undeclared_network · <declared scope>
F-01 Prompt injectionCWE-94 · CWE-1427Layer L2
network use found in code, not declared in the description
Why
the description does not admit a capability the code has
Fix
declare network use in the description, or remove it

Audit 0.4.1 · source sha 6ba64a7d2489 · 14 Oct 2026Report an issue or request a re-scan

Provenance

Who published it, and what the verdict is pinned to

  • Publishersipyourdrink-ltd GitHub organizationOwner of the repository this skill is read from
  • Source foldersipyourdrink-ltd/bernstein/packages/cursor-plugin/skills/bernstein-qualityThe exact folder we audited
  • LicenceApache-2.0As the repository states it
  • Commit pinned for this verdict6ba64a7d2489A new audit runs when the source changes
  • Repository statusNot archivedPushed today
  • Sandboxed runNot runSkills are read, not executed; layer L4 is skipped

What it tells the agent

Full source on GitHub ↗

Its description: Show quality metrics for Bernstein runs - success rates per model, lint/test pass rates, completion time distributions. Use when the user asks about quality, reliability, which model performs best, or pass rates.

---
name: bernstein-quality
description: >
  Show quality metrics for Bernstein runs - success rates per model,
  lint/test pass rates, completion time distributions. Use when the user
  asks about quality, reliability, which model performs best, or pass rates.
---

# Bernstein Quality Metrics

Analyze quality and reliability of agent-generated code.

## When to Use

- User asks "how reliable are the agents?" or "which model is best?"
- User wants success rates, pass rates, or completion time stats
- User asks about test failures or lint issues across models
- User says "show me quality metrics"

## Instructions

1. Run `scripts/quality.sh metrics` for overall quality metrics.
2. Run `scripts/quality.sh pass-rates` for lint/typecheck/test pass rates by model.
3. Run `scripts/quality.sh times` for completion time distributions.

4. Present a quality dashboard:

```
## Quality Dashboard

### Success Rate by Model
| Model | Tasks | Success | Fail | Rate |
|-------|-------|---------|------|------|
| claude-sonnet-4 | 24 | 22 | 2 | 91.7% |
| gpt-4.1 | 12 | 10 | 2 | 83.3% |

### Pass Rates
| Check | Overall | claude-sonnet-4 | gpt-4.1 |
|-------|---------|-----------------|---------|
| Lint | 96% | 98% | 92% |
| Type-check | 88% | 91% | 83% |
| Tests | 85% | 89% | 75% |

### Completion Times
| Percentile | Time |
|------------|------|
| p50 | 3m 20s |
| p90 | 8m 45s |
| p99 | 15m 12s |
```

5. Highlight any models with significantly lower pass rates.
6. Recommend model routing adjustments if one model consistently underperforms.

Excerpt, first 1,548 characters of SKILL.md, verbatim from the audited commit. It is text from someone else’s repository, quoted so you can judge it before your agent reads it.

Install

Pinned to the audited commit 6ba64a7

Download folder ↗
git clone https://github.com/sipyourdrink-ltd/bernstein
git -C bernstein checkout 6ba64a7d2489

The author documents no install command, so this uses the repository directly. Our verdict covers commit 6ba64a7d2489 only.

Works in

The author has not said which agents this skill supports, and we have not tested it in any.

Audit history

Every audit, every source change

  1. !CAUTION B 89 / 100

    first audit · source 6ba64a7d2489

README badge

For maintainers · shows the latest audit

ModelsAtlas: CAUTION BMODELSATLASCAUTION · B
[![ModelsAtlas: CAUTION B](https://modelsatlas.com/skills/sipyourdrink-ltd/bernstein-quality/badge.svg)](https://modelsatlas.com/skills/sipyourdrink-ltd/bernstein-quality/)

The badge shows our verdict and grade for this skill, and links back to this page. It changes when the audit does.

Similar skills

Add this badge to your README

[![ModelsAtlas: CAUTION B](https://modelsatlas.com/skills/sipyourdrink-ltd/bernstein-quality/badge.svg)](https://modelsatlas.com/skills/sipyourdrink-ltd/bernstein-quality/)

Questions about Bernstein Quality

What does the Bernstein Quality skill do?
The open-source governance layer for AI agents: write the rules declaratively, Bernstein enforces them and produces the verifiable, replayable record. Free, Apache-2.0. https://bernstein.run
Is Bernstein Quality safe to install?
With care. The audit graded it B (89/100) and found 5 things worth knowing before you trust this skill, listed below with the exact line each was found on.
What can Bernstein Quality access on my machine?
The audit observed that it reaches the network. At least one of those is not mentioned in its own description, which is itself a finding. Secrets in the source: none found.
How current is this page?
The grade is for one exact copy of the source (6ba64a7d2489), read on 2026-10-14. The repository is watched, and a new audit runs when it changes — this is the first audit.

Sources

Spotted something wrong? Report a correction · Methodology

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.