Alfworld Receptacle OperatorSAFE
Create, Evaluate, and Connect AI Skills
Overview
Create, Evaluate, and Connect AI Skills
4501e739125cOBSERVED · 2026-10-12What it tells the agent
The instruction file, verbatim from the audited commit — this is the text the model reads, and the surface the audit's instruction layer examines. Quoted here so you can judge it without cloning anything.
---
name: alfworld-receptacle-operator
description: This skill opens or closes a receptacle (like a fridge, cabinet, or microwave) to access its interior or secure it. It should be triggered when an object needs to be placed inside/retrieved from a closed container, or when an open container should be closed (e.g., for energy efficiency or task cleanliness). The skill decides the appropriate 'open' or 'close' action based on the receptacle's current state and the task context.
---
# Skill: Receptacle Operator
## When to Use
Use this skill when you need to:
1. **Access a closed receptacle** to place an object inside or take an object out.
2. **Secure an open receptacle** after accessing it (e.g., to conserve energy, maintain cleanliness, or complete a task step).
## Core Decision Logic
1. **Check the receptacle's state** from the observation.
- If it reports "is closed" or "is open", note the state.
- If the interior is visible (e.g., "In it, you see..."), it is open.
2. **Choose action based on goal**:
- **Goal requires interior access** (e.g., "put in microwave", "take from fridge"):
- If closed → `open {recep}`
- If open → proceed with next step (e.g., `put` or `take`)
- **Goal requires securing receptacle** (e.g., after accessing, or for efficiency):
- If open → `close {recep}`
- If closed → no action needed
3. **Execute the action** using the exact format: `Action: open {recep}` or `Action: close {recep}`
## Example from Trajectory
- **Task**: "cool some tomato and put it in microwave"
- **Step 1**: At closed fridge → `Action: open fridge 1`
- **Step 2**: After checking interior → `Action: close fridge 1` (for efficiency)
- **Step 3**: At closed microwave → `Action: open microwave 1`
## Important Notes
- Always verify the receptacle state from the latest observation before acting.
- The skill only handles `open` and `close` actions. Other actions (like `take`, `put`, `cool`) are separate skills.
- If "Nothing happened" is observed after your action, the receptacle may already be in that state—re-check and adjust.
For detailed state diagrams and edge cases, see the reference documentation.Trust audit
SAFEgrade B · trust 89/100 Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | PASS |
| L1 | Static analysis of the code | NA |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- none-observed
- Network
- none-observed
- Shell
- none-observed
- Dependencies
- pinned
- Secrets in source
- none-found
Findings (0)
No findings outside the package's declared scope.
Gates applied: no_behavioural_pass.
4501e739125cfull audit observations/trust-audit/skill/zjunlp__alfworld-receptacle-operator.json · Report an issue / request a re-scanAudit history
Every audit this skill has had.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-12 | 4501e739125c | SAFE | B | 89 | first audit |
Questions
What does the Alfworld Receptacle Operator skill do?
Create, Evaluate, and Connect AI Skills
Is Alfworld Receptacle Operator safe to install?
The audit found nothing in the source that contradicts what it says it does, and graded it B (89/100). Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean skill reads B.
What can Alfworld Receptacle Operator access on my machine?
The audit observed no filesystem, network or shell use at all in its source.
How current is this page?
The grade is for one exact copy of the source (4501e739125c), read on 2026-10-12. The repository is watched, and a new audit runs when it changes — this is the first audit.