design-ai-benchmarking — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited design-ai-benchmarking (Agent Skill) and scored it 91/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 1 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 1 flagged
The text {match} is the classic direct prompt-injection phrasing. Placed in a skill body that the agent reads as trusted instructions, it tries to make the agent abandon its prior rules and follow whatever comes next — a full system-prompt override.
ignore/disregard/forget … previous instructions sentence.Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
## AI-Benchmark Design Review
Evaluation question: ...
Arms / systems compared: ...
Reference (human-expert panel): ...
Unit of rating: (item / case / output)
### Rubric (decoupled dimensions)
- dimension -> construct -> anchors (1..k)
### Calibration probes (blinded, randomized)
- positive-control / known-bad / instability / mechanism-contradiction
### Reviewer panel
- n reviewers, metadata captured, per-reviewer randomized order
### Reliability plan
- IRR target on the anchor set of real items (ICC form + 95% CI) + control-item hit rate (a competence check, reported separately)
### Judge strategy
- human-as-judge / LLM-as-judge / both + adjudication rule
### Validity risks
1. ...
### Minimal fixes
- ...
### Decision
- Ready to collect / Needs rubric revision / Needs arm or judge redesignReviewer ratings, reference labels, probe outcomes and agreement statistics come only from collected rating records. Never invent them: a reported ICC, kappa or score with no underlying rating record is the failure this skill exists to prevent. Cite a reference only with a /search-lit-confirmed DOI or PMID; mark any other [UNVERIFIED - NEEDS MANUAL CHECK]. Flag an unconfirmed clinical definition, diagnostic criterion or guideline recommendation [VERIFY] and ask the user.
Pin down, in writing:
indistinguishable from expert outputs", not "system A is deployment-ready")
format), so no arm has a hidden advantage
or both
Gate: Present the reconstructed evaluation question, arms, and reference to the user and confirm before designing the rubric. A wrong reconstruction misdirects the entire benchmark.
valid/correct" separate from "is it novel", "is it feasible/measurable", "does it add value over current tools", and "would it change action". A candidate can be high-validity yet low-added-value ("real but redundant"); a single blended score hides this.
reviewer before locking.
orthogonal, then report the full inter-dimension correlation matrix.
${CLAUDE_SKILL_DIR}/references/elicitation_rubric_template.md (dimensions, anchors,probe flavors).
Plant a few deliberate control items, blinded and randomized across raters (record who received which via a probe_arm flag), to anchor the scale, measure rater drift/fatigue, and audit the rubric and pipeline. Four flavors:
effect" with "best", and whether the construct-independence gate (Phase 7) works.
Probes are planted or adjudicated, never fabricated to fit a hypothesis.
order and fatigue effects.
non-independent rating.
Gate: Present the panel composition, stratification, and randomization plan for user review before recruitment is finalized.
model stated (e.g. ICC(2,1): two-way random, absolute agreement, single rater) or Krippendorff's α (ordinal); weighted (Cohen's) kappa is a two-rater statistic — and a justified target. Size the number of items for the CI width you need: ICC precision is driven mainly by the item count (Koo & Li, J Chiropr Med 2016).
rate on known-good vs known-bad controls. Do not present an ICC computed on the controls as evidence of rubric or scale validity: ICC scales with the spread between items, controls are extreme by construction, so their ICC is high whatever the raters' reliability on real items (same five raters, same noise: ICC(2,1) 0.89 on four planted controls, 0.16 on 40 real items), and it rests on a handful of items.
stated form — with an agreement measure alongside (exact agreement, SEM), since reliability depends on how heterogeneous the rated items are (de Vet et al., J Clin Epidemiol 2006). A low ICC on real items with a good control hit rate points to little true spread among the items or a rubric that does not separate them, not to careless raters.
/analyze-stats).
When the item pool exceeds what one reader can rate in a session, do not make every reader rate every item (that caps the pool at the per-reader limit). Use anchor-and-rotate (an anchor set plus rotating incomplete blocks — not a balanced incomplete block design, since reader pairs are not co-rated equally often): all readers rate a shared anchor set of real items (which carries the inter-rater reliability; the planted controls carry only the competence check) plus a rotating unique block each. The binding constraint is usually the number of available expert readers, so solve the reverse problem (largest pool for R readers) to size the must-rate set. Pre-specify anchor membership, raters-per-item, and the rotation seed before rating. Read ${CLAUDE_SKILL_DIR}/references/anchor_rotate_reader_allocation.md for the formulas, trade-offs, and a stdlib implementation.
validated against the human panel on the anchor set of real items, not only on the extreme control items.
discussion) and who adjudicates.
near-tautological composites built from the outcome's defining components — they produce an inflated, near-circular result and belong as labeled probes, not discoveries.
Write the machine-readable rating record as a JSON schema, starting from ${CLAUDE_SKILL_DIR}/references/benchmark_export_schema.json: per-item ratings on every rubric dimension, free-text justifications, follow-up flags, the probe_arm flag, reviewer id and metadata, item order, and timing.
Gate: Present the final rubric, probe set, panel plan, judge strategy, and export schema together; collect explicit user approval before any rating begins, because changes after collection starts compromise the comparison.
/analyze-stats for ICC (stated form) / Krippendorff's α / kappa (two raters) / DeLong, agreement sample size, and effect-size real-worldtranslation of the benchmark results
/check-reporting for STARD-AI, CLAIM, or TRIPOD+AI item-level reporting once the design is locked/design-study when the broader study around the benchmark (cohort logic, analysis unit,comparator) also needs review
/peer-review or /self-review only after ratings exist and a manuscript is being assessed~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.