content-refinement-agent — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited content-refinement-agent (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Faithful implementation of the Content Refinement Agent from PaperOrchestra (Song et al., 2026, arXiv:2604.05018, §4 Step 5, App. F.1 pp. 49–51).
Cost: ~5–7 LLM calls (App. B), typically ~3 refinement iterations, each consisting of one reviewer call and one revision call.
The paper highlights this step as one of the largest contributors to overall quality: refinement alone accounts for +19% (CVPR) and +22% (ICLR) absolute acceptance-rate improvement (Fig. 4). Get this step right.
workspace/drafts/paper.tex — output of Step 4workspace/inputs/conference_guidelines.mdworkspace/inputs/experimental_log.md — used as ground truth for thehallucination check
workspace/citation_pool.json / workspace/refs.bib — the allowedbibliography
workspace/refinement/iter1/, iter2/, iter3/ — per-iteration snapshotscontaining paper.tex, paper.pdf, review.json, score.json
workspace/refinement/worklog.json — append-only history of decisionsworkspace/final/paper.tex and workspace/final/paper.pdf — copy of thebest accepted snapshot
prev_score = score(paper.tex) # baseline from initial draft
snapshot iter0/
for iter in 1..ITER_CAP (default 3):
1. simulate_review(paper.tex) → review.json
(uses `references/reviewer-rubric.md` rubric)
2. apply_revision(paper.tex, review.json) → new_paper.tex
(uses verbatim Refinement Agent prompt at `references/prompt.md`)
3. snapshot iter<N>/ with new_paper.tex, review.json
latexmk -pdf new_paper.tex → iter<N>/paper.pdf
4. score(new_paper.tex) → curr_score
5. decide via score_delta.py:
- if curr.overall > prev.overall: ACCEPT
- elif curr.overall == prev.overall and net_subaxis ≥0: ACCEPT
- else: REVERT
6. apply_worklog.py to append the decision
7. if REVERT or no actionable weaknesses or iter == ITER_CAP: HALT
paper.tex ← new_paper.tex (only on ACCEPT)
prev_score ← curr_score
cp <best iter>/paper.tex → workspace/final/paper.texThe "best" snapshot at HALT is the one with the highest accepted overall score. On a REVERT halt, the best is the iteration immediately before the revert.
python skills/content-refinement-agent/scripts/snapshot.py \
--src workspace/drafts/paper.tex \
--dst workspace/refinement/iter0/This creates iter0/paper.tex. Then compile to iter0/paper.pdf:
cd workspace/refinement/iter0/ && latexmk -pdf -interaction=nonstopmode paper.texScore it (see Step 1 below) → iter0/score.json.
For each iteration N starting from 1:
Load references/reviewer-rubric.md as the system prompt for the simulated reviewer call. The reviewer reads iter<N-1>/paper.pdf (or paper.tex if your host LLM lacks PDF input) and produces a JSON of strengths, weaknesses, questions, and per-axis scores.
The rubric is structured to mimic AgentReview (Jin et al., 2024) — the paper's chosen evaluator. We ship a faithful rubric in the references directory; the host agent's LLM does the actual reviewing.
Save to workspace/refinement/iter<N>/review.json.
The reviewer call produces both qualitative feedback and a per-axis score:
{
"axis_scores": {
"scientific_depth": {"score": 65, "justification": "..."},
"technical_execution": {"score": 70, "justification": "..."},
"logical_flow": {"score": 60, "justification": "..."},
"writing_clarity": {"score": 55, "justification": "..."},
"evidence_presentation":{"score": 72, "justification": "..."},
"academic_style": {"score": 68, "justification": "..."}
},
"overall_score": 64.5,
"strengths": [...],
"weaknesses": [...],
"questions": [...]
}Save to iter<N>/score.json. (Combined with review.json if your host emits one document; the schemas overlap.)
Load the verbatim Content Refinement Agent prompt at references/prompt.md. Prepend the Anti-Leakage Prompt. Inputs:
paper.tex — current draftpaper.pdf — compiled PDF (multimodal context if available)conference_guidelines.mdexperimental_log.md — ground truth for numeric claimsworklog.json — history of previous changescitation_pool.json — the allowed bibliographyreviewer_feedback — the JSON from Step 1The prompt instructs the model to address weaknesses, integrate question answers, and emit two output blocks:
{addressed_weaknesses[], integrated_answers[], actions_taken[]}Save the revised LaTeX as iter<N>/paper.tex. Append the worklog JSON to workspace/refinement/worklog.json via apply_worklog.py.
cd workspace/refinement/iter<N>/ && latexmk -pdf -interaction=nonstopmode paper.texThen re-run the simulated review on the new draft → updated score.json for the new iteration. (This is the "re-score after revision" call.)
The calling loop must track CONSECUTIVE_SMALL (starts at 0) and pass it on each call so score_delta.py can detect the plateau:
python skills/content-refinement-agent/scripts/score_delta.py \
--prev workspace/refinement/iter<N-1>/score.json \
--curr workspace/refinement/iter<N>/score.json \
--plateau-threshold 1.0 \
--plateau-streak 3 \
--consecutive-small $CONSECUTIVE_SMALL \
> workspace/refinement/iter<N>/delta.json
EXIT=$?
# Update streak for next iteration:
CONSECUTIVE_SMALL=$(python3 -c "
import json
d = json.load(open('workspace/refinement/iter<N>/delta.json'))
print(d['consecutive_small'])
")Exit codes:
0 — ACCEPT (overall improved or tied with non-negative net sub-axis, no plateau)1 — REVERT (overall decreased)2 — REVERT (tied overall, but net sub-axis change negative)4 — HALT_PLATEAU (accepted but N consecutive iterations below threshold — stop early)Behavior:
iter<N>/paper.tex as the new best. Continue to iter N+1.iter<N-1>/paper.tex back as canonical, halt.iterations are unlikely to yield meaningful gains. In practice ~85% of refinement gain comes in iteration 1; the plateau fires when subsequent iterations improve by less than 1 point for 3 consecutive rounds.
Always log the decision via apply_worklog.py --decision ....
Halt the loop when ANY of these is true:
ITER_CAP (default 3).score_delta.py returned exit code 1 or 2 (REVERT).weaknesses list is empty (no actionablefeedback to apply).
score_delta.py returned exit code 4 (HALT_PLATEAU — plateau early-stop).Identify the iteration with the highest accepted overall_score (this may be the latest accepted iteration, OR an earlier one if a later iteration was reverted). Copy:
cp workspace/refinement/iter<best>/paper.tex workspace/final/paper.tex
cp workspace/refinement/iter<best>/paper.pdf workspace/final/paper.pdfThen in the final report, tell the user:
The paper explicitly notes that early versions of the Refinement Agent "exploited the automated reviewer's scoring function by superficially listing missing baselines as limitations to artificially inflate acceptance scores." The verbatim prompt forbids this. You must honor it:
The Refinement Agent's job is presentation, not new science. If the reviewer asks for missing data, simply skip those points — do NOT add fabricated experiments, do NOT add a "future work" item promising them.
limitation that..." is forbidden. The model can address weaknesses through clearer explanation, but must not game the evaluator by listing them defensively.
The agent cannot introduce new numbers, only re-present existing ones.
These rules prevent reward hacking and keep the refinement loop honest.
references/prompt.md — verbatim Content Refinement Agent prompt from App. F.1references/reviewer-rubric.md — AgentReview-style scoring rubric (6 axes)references/halt-rules.md — accept/revert/halt logic in formal pseudocodereferences/safe-revision-rules.md — anti-reward-hack constraintsscripts/score_delta.py — accept/revert decision from two score JSONsscripts/apply_worklog.py — append iteration entries to worklog.jsonscripts/snapshot.py — copy paper.tex/paper.pdf into iter<N>/ for rollback~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.