Scienceworld Liquid FillerSAFE
Create, Evaluate, and Connect AI Skills
Overview
Create, Evaluate, and Connect AI Skills
4501e739125cOBSERVED · 2026-10-12What it tells the agent
The instruction file, verbatim from the audited commit — this is the text the model reads, and the surface the audit's instruction layer examines. Quoted here so you can judge it without cloning anything.
---
name: scienceworld-liquid-filler
description: This skill fills a container with liquid from a source by first placing the container at the source, then activating the source (e.g., turning on a sink), and finally deactivating it. It should be triggered when the agent has an empty or partially filled container and needs to add a liquid component. The skill results in the container containing the liquid, ready for mixing or further use.
---
# Instructions
## 1. Identify the Goal
Your goal is to fill a target container with a specific liquid from a source. This skill is triggered when you have a container (empty or partially filled) and need to add a liquid component to it.
## 2. Prerequisites & Initial State
Before executing this skill, ensure you have:
* **A Target Container:** The container you wish to fill (e.g., a cup, bowl, jug). It should be in your inventory.
* **A Liquid Source Identified:** You must know the location of a functional liquid source (e.g., a sink, a jug containing liquid, a toilet with water). Use the `look around` and `examine` actions to find one.
## 3. Core Procedure
Execute the following sequence of actions precisely:
1. **Position the Container:** Move the target container to the liquid source.
* **Action:** `move <CONTAINER> to <SOURCE>`
* **Example:** `move cup to sink`
2. **Activate the Source:** Turn on the liquid source to begin the flow.
* **Action:** `activate <SOURCE>`
* **Example:** `activate sink`
3. **Deactivate the Source:** Turn off the liquid source once the container is sufficiently filled. Assume the filling is instantaneous upon activation.
* **Action:** `deactivate <SOURCE>`
* **Example:** `deactivate sink`
4. **Retrieve the Filled Container:** Pick up the now-filled container.
* **Action:** `pick up <CONTAINER>`
* **Example:** `pick up cup`
## 4. Verification & Next Steps
* Use `examine <CONTAINER>` to confirm it now contains the desired liquid.
* The container is now ready for the next step in your task (e.g., `mix`).
## 5. Important Notes
* **Efficiency:** Do not repeatedly pick up the container between steps unless necessary for transport. The sequence `move -> activate -> deactivate -> pick up` is optimal.
* **Error Handling:** If an action fails (e.g., "You can't do that"), re-examine the scene and the object states. The source may need to be in a specific state (e.g., a sink must be `turned off` before it can be activated).
* **Context:** This skill is part of a larger procedure (e.g., following a recipe). Always refer to the primary task goal.Trust audit
SAFEgrade B · trust 89/100 Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | PASS |
| L1 | Static analysis of the code | NA |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- none-observed
- Network
- none-observed
- Shell
- none-observed
- Dependencies
- pinned
- Secrets in source
- none-found
Findings (0)
No findings outside the package's declared scope.
Gates applied: no_behavioural_pass.
4501e739125cfull audit observations/trust-audit/skill/zjunlp__scienceworld-liquid-filler.json · Report an issue / request a re-scanAudit history
Every audit this skill has had.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-12 | 4501e739125c | SAFE | B | 89 | first audit |
Questions
What does the Scienceworld Liquid Filler skill do?
Create, Evaluate, and Connect AI Skills
Is Scienceworld Liquid Filler safe to install?
The audit found nothing in the source that contradicts what it says it does, and graded it B (89/100). Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean skill reads B.
What can Scienceworld Liquid Filler access on my machine?
The audit observed no filesystem, network or shell use at all in its source.
How current is this page?
The grade is for one exact copy of the source (4501e739125c), read on 2026-10-12. The repository is watched, and a new audit runs when it changes — this is the first audit.