candidate-selector — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited candidate-selector (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
The final pipeline stage. Re-evaluates all skill candidates (original + up to 3 revisions) under identical conditions and selects the best one using a composite score that balances pass rate, trigger reliability, and token efficiency.
Candidates to evaluate:
| Candidate | Source |
|---|---|
| Original | The source skill at <skill-path> |
| Minimalist | evals/workspace/revisions/revision-A.md |
| Additive | evals/workspace/revisions/revision-B.md |
| Restructured | evals/workspace/revisions/revision-C.md |
If a revision file does not exist (e.g., revision-synthesizer failed to produce it), skip that candidate.
Before running evals, validate each candidate:
skills-ref validate <candidate-path>Exclude any candidate that fails validation. Note the exclusion in the final report.
For each valid candidate, run the full quality evaluator workflow:
<skill-dir>/evals/evals.json through both with-skill and without-skill configurations.evals/workspace/candidate-evals/<candidate-name>/.This re-evaluates the original too — even though it already has eval results from the initial pipeline run. Re-running ensures a fair comparison; model nondeterminism means prior results may differ from current results on the same candidate.
All evaluations must use:
For each candidate's eval outputs, run the output-grader to produce grading.json and grading-summary.json.
Run the benchmark aggregator:
./bin/compute-benchmark --workspace evals/workspace/quality-results/iteration-<N>This reads all timing.json and grading.json files across candidates and produces evals/workspace/quality-results/iteration-<N>/benchmark.json with per-candidate metrics:
{
"candidates": {
"original": {
"pass_rate": 0.72,
"trigger_rate": 0.85,
"token_efficiency_delta": 0.0,
"composite_score": null
},
"revision-A": {
"pass_rate": 0.75,
"trigger_rate": 0.82,
"token_efficiency_delta": -0.12,
"composite_score": null
}
}
}1.0 - (with_skill_tokens / without_skill_tokens). Positive means skill reduces tokens.Run the selector:
./bin/select-best --workspace evals/workspace/quality-results/iteration-<N>This computes the composite score for each candidate:
composite_score = (pass_rate * 0.5) + (trigger_rate * 0.3) + (token_efficiency_delta * 0.2)The weights prioritize output quality (50%), then reliable triggering (30%), then efficiency (20%).
The selector produces evals/workspace/selected.json:
{
"selected": "revision-B",
"selected_path": "evals/workspace/revisions/revision-B.md",
"composite_score": 0.691,
"rankings": [
{"candidate": "revision-B", "composite_score": 0.691, "pass_rate": 0.78, "trigger_rate": 0.88, "token_efficiency_delta": -0.05},
{"candidate": "revision-A", "composite_score": 0.682, "pass_rate": 0.75, "trigger_rate": 0.82, "token_efficiency_delta": -0.12},
{"candidate": "revision-C", "composite_score": 0.670, "pass_rate": 0.73, "trigger_rate": 0.80, "token_efficiency_delta": 0.02},
{"candidate": "original", "composite_score": 0.655, "pass_rate": 0.72, "trigger_rate": 0.85, "token_efficiency_delta": 0.0}
],
"threshold_checks": {
"pass_rate_minimum": 0.5,
"trigger_rate_minimum": 0.5,
"all_candidates_above_threshold": true
}
}Minimum thresholds:
If NO candidate meets both thresholds, the selection FAILS. Write a failure report to evals/workspace/selected.json:
{
"selected": null,
"selected_path": null,
"composite_score": null,
"rankings": [...],
"threshold_checks": {
"pass_rate_minimum": 0.5,
"trigger_rate_minimum": 0.5,
"all_candidates_above_threshold": false
},
"failure_reasons": {
"revision-A": "pass_rate 0.42 below threshold 0.5",
"revision-B": "trigger_rate 0.45 below threshold 0.5",
"revision-C": "pass_rate 0.38 below threshold 0.5, trigger_rate 0.44 below threshold 0.5",
"original": "pass_rate 0.41 below threshold 0.5"
}
}If a candidate is selected:
evals/workspace/selected-SKILL.md.selected.json with full rankings (as shown in Step 5).<name> with composite score <score>. Pass rate: <pass_rate>, Trigger rate: <trigger_rate>."If no candidate meets thresholds:
selected.json with failure reasons.selected-SKILL.md.If no candidate was selected, provide actionable recommendations:
status: "skipped" with a reason.Verify this skill produces correct output:
selected-SKILL.md contains the winning candidate's content.selected.json has full rankings sorted by composite_score descending.~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.