research-proof-d6da0d — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited research-proof-d6da0d (Agent Skill) and scored it 91/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 1 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 1 flagged
The text {match} is the classic direct prompt-injection phrasing. Placed in a skill body that the agent reads as trusted instructions, it tries to make the agent abandon its prior rules and follow whatever comes next — a full system-prompt override.
ignore/disregard/forget … previous instructions sentence.Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Turn research work into a proof program: define the object, freeze the verifier, seek counterexamples, and update a ledger as evidence changes. Use the Output Contract headings inside each answer, even for brief yes/no reviews. Sources inspire the method; they do not prove the claim.
Start from a falsifiable proposition, not a favorite mechanism:
For domain D and baseline B, candidate family C wins only if metric M improves by delta, guardrails G stay within budget, hidden costs H are charged, and transfer test T survives.Evidence labels: PROVEN only inside an explicit verifier; SUPPORTED for scoped evidence; REJECTED for failed gates; OPEN when untested or under-specified. Before implementation, require Claim, Verifier Boundary, Baseline / Candidate Family, Enemy Terms, and Rejection Gates; if missing, produce them first and stop planning.
Route by task type, then load the smallest reference that can falsify the claim.
| Situation | Method | Failure to watch |
|---|---|---|
| One artifact, frozen metric | Fixed-harness research loop | local overfit |
| Math/algorithm/science claim | Proof ladder | plausible prose as proof |
| Many cheap ideas | Divergent researcher pool | same idea repeated |
| Program-search discovery | Evaluator-gated program search | invalid shortcut accepted |
| Tool-using research agent | Observable agent loop | stale state or endless acting |
| Literature/live-source work | Evidence synthesis / live-source research review | cherry-picked or stale sources |
| Medical/intervention claim | Protocol-frozen evidence review | certainty inflation |
| Cross-field innovation | Cross-domain transfer search | analogy overfit |
| Causal data claim | Causal identification review | missing negative-control pressure |
| Hard debugging/regression/anomaly | Causal attribution review | ranking before evidence exists |
| Design/product discovery | Design-science review | no behavior metric |
| Research agenda | Progressive-program review | novelty theater |
| Shipping research | Transfer gate | sandbox win treated as proof |
Use references/research-methods.md, references/proof-methods.md, or references/source-patterns.md only when the compact route is not enough.
Claim: domain, baseline, candidate family, metric/outcome, guardrails, hidden costs, win condition.Verifier Boundary: inputs, evaluator, rubric, mutable artifact, forbidden access, tampering rules, review authority.Baseline / Candidate Family; never argue from taste, prestige, novelty, or lab branding.Enemy Terms: leakage, evaluator hacking, extra supervision, human burden, time, memory, cost, distribution shift, dependency changes, cherry-picked sources, weak measurement, confounding.Proof Ladder: examples -> counterexamples -> invariants -> lemmas -> executable check -> formal proof -> transfer.Rejection Gates as prompt-specific conditions that fail the claim; avoid reusable boilerplate gates.information_gain_priority, symptom_fit_prior, operational_check_order, or observed_evidence_ranking. Only observed_evidence_ranking may be causal, and only with resolvable EvidenceRefs; otherwise mark DOMINANT_UNKNOWN_PENDING_D1.Rejection Gates example: reject duplicate-case inflation; reject universal reference loading; reject averaging agent opinions instead of gate evidence.references/research-methods.md; headline status must derive from raw evidence.Proof Ledger: changed, failed, still open, decision CONTINUE / REFINE / PIVOT / REJECT, and next adversarial pressure. Never use “make it better” as the next step.For any research-proof answer, including brief yes/no reviews, keep these exact headings unless the user explicitly forbids a template. Compact answers may use one sentence per heading. If the outer format is JSON, XML, a table, or another schema, put these headings inside the answer/value field; the wrapper format does not replace the proof contract.
Claim
Verifier Boundary
Baseline / Candidate Family
Current Evidence
Enemy Terms
Rejection Gates
Proof Ladder / Transfer Path
Verdict
Proof Ledger Decision
Next PressureMinimum content:
Claim: name baseline, candidate, metric/outcome, guardrails/costs, win condition.Verifier Boundary: name frozen inputs/evaluator/rubric, mutable candidate, forbidden access/tampering, review authority.Rejection Gates: write prompt-specific conditional failures near shortcut terms (reject if, fails when, cannot pass unless); do not reuse generic boilerplate.Rejection Gates or Current Evidence.Current Evidence and Verdict: separate raw facts from status; Verdict uses OPEN / SUPPORTED / REJECTED (PROVEN only inside a verifier), while REFINE / PIVOT stay in Proof Ledger Decision.Proof Ladder / Transfer Path: name the selected method, why it fits, and at least two method-specific moves; reject the wrong proof family when that is the main risk.Next Pressure: name the smallest discriminator or transfer check.For larger work, use references/research-claim-template.md and references/proof-ledger-template.md.
Load references/research-operations.md only for Observable Agent Loop, Research TDD Sandbox, Backtest This Skill, Peer Review / Skill Improvement, Prompt-injection boundary, or SDD Integration.
For behavioral backtests, use evals/evals.json as truth, references/backtest-cases.md as the grading contract, references/behavioral-run-protocol.md for runs, and references/skill-improvement.md for delegation, registry use, and measured maturity gates.
When changing eval harnesses, graders, artifact checks, or metric adapters, load references/eval-harness-architecture.md first. Reuse schemas/helpers before one-off scripts, logs, or report-only checks.
Run the structural smoke test from the repository root when available: node tools/validate-research-skill.mjs
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.