A tiny eval harness that checks whether agent skill files actually improve task outcomes.
SaferSkills independently audited skillbench-lite (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
A tiny eval harness that tests whether agent skill files actually improve task outcomes.
Most skill repos tell you what a skill is supposed to do. SkillBench Lite asks a sharper question: did the skill change the result enough to justify using it?
Agent skills are spreading fast across Claude Code, Codex, Cursor, Gemini, Copilot, and local agent tools. The missing layer is lightweight proof. A skill can sound excellent and still add no measurable value, add too much token overhead, or quietly regress an answer.
SkillBench Lite gives skill authors a small, local scorecard:
git clone https://github.com/redkoai/skillbench-lite.git
cd skillbench-lite
npm test
npm run demoThe demo writes:
reports/demo-report.md| Skill | Task | Baseline | With skill | Improved |
|---|---|---|---|---|
| precise-debugging | timezone-bug | fail | pass | yes |
| precise-debugging | cache-invalidation | fail | pass | yes |
| precise-debugging | empty-state | fail | pass | yes |
Create skillbench.config.json:
{
"command": "node examples/demo-agent.js",
"skills": [
{
"id": "precise-debugging",
"path": "skills/precise-debugging.md"
}
],
"tasks": [
{
"id": "timezone-bug",
"prompt": "Explain why the date test fails only outside UTC.",
"assertions": [
{ "contains": "timezone normalization" },
{ "contains": "Date.UTC" },
{ "exitCode": 0 }
]
}
]
}Run it:
node ./bin/skillbench.js run --config skillbench.config.jsonYour command receives these environment variables:
SKILLBENCH_MODE: baseline or skillSKILLBENCH_TASK_IDSKILLBENCH_TASKSKILLBENCH_TASK_JSONSKILLBENCH_SKILL_IDSKILLBENCH_SKILL_PATHSKILLBENCH_FIXTURE_DIRSupported assertions:
{ "contains": "required text" }
{ "notContains": "forbidden text" }
{ "matches": "regular expression" }
{ "exitCode": 0 }See docs/architecture.md.
MIT
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.