tool-eval

tool-eval is a skill for Claude Code from ByteStack-Labs/claude-plugins. It costs 253 tokens per session (1,698 once invoked), scanned A, original, MIT.

A testing tool for checking whether an agent’s tools return accurate results. It compares simple exact matches with cleaned-up values and answers recalculated from the original inputs.

In plain words
What is it for?
Use it to evaluate tool calls, recalculate expected answers, compare scoring methods, and distinguish formatting mistakes from genuine failures.
Why use it?
A single pass/fail score can wrongly reject a correct answer because of formatting, or accept a wrong answer because the stored answer is incorrect. This separates those cases and provides results that others can rerun.

Skill for Claude Code

Written for Claude Code: shipped in a Claude Code plugin.

Part of the agent-reliability plugin — 4 skills shipped together

Good fit Use it to evaluate tool calls, recalculate expected answers, compare scoring methods, and distinguish formatting mistakes from genuine failures.

Compare 6 skills from other repositories ↓
Install with agentmods
npx agentmods add skills/bytestack-labs/claude-plugins/tool-eval
Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent
npx skills add ByteStack-Labs/claude-plugins --skill tool-eval
Clone the repo
git clone --depth 1 https://github.com/ByteStack-Labs/claude-plugins

Made for: Claude Code.

Or install agent-reliability, the plugin that ships this one along with the rest of its 4 skills.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for tool-eval

README.md
[![agentmods](https://agentmods.dev/badge/skills/bytestack-labs/claude-plugins/tool-eval/github.svg)](https://agentmods.dev/skills/bytestack-labs/claude-plugins/tool-eval)
Your own site
<a href="https://agentmods.dev/skills/bytestack-labs/claude-plugins/tool-eval"><img src="https://agentmods.dev/badge/skills/bytestack-labs/claude-plugins/tool-eval/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for tool-eval

Your own site · 80×15
<a href="https://agentmods.dev/skills/bytestack-labs/claude-plugins/tool-eval"><img src="https://agentmods.dev/badge/skills/bytestack-labs/claude-plugins/tool-eval.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 253 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 1,698 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00253 $0.01698
Opus 5.5 $0.00101 $0.00679
Sonnet 5.5 $0.00051 $0.00340
Haiku 4.5 $0.00025 $0.00170

Measured 2mo ago against content hash 14cd64a89f33, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

tool-eval scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2mo ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

agent-reliability/skills/tool-eval/SKILL.md · 141 lines

How it starts

The opening of the file, as written. The whole thing — 141 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Tool Eval

A tool is the contract between a deterministic system and a non-deterministic agent. When you score that contract with exact string match against a stored ground truth, the score itself becomes untrustworthy in two directions at once: it marks a correct answer wrong when the formatting differs, and it marks a wrong answer right when the answer happens to match a ground truth that is itself wrong. The headline number hides both.

This skill does not grade the tool with another model's opinion. It re-derives the tool's real accuracy from the raw inputs, separates the formatting misses from the genuine failures, and hands back a receipt anyone can rerun. The qualitative judge layer, whether the tool is well named and well documented, is kept, but it stays labeled as an opinion and never enters the number.

How to run it

Run tool-eval on this tool evaluation. Take the committed run transcript (tool calls, answers, stored ground truth) and score it three ways: naive exact match, normalized value match (strip currency, commas, whitespace, then compare the numbers), and a recompute from the raw inputs that ignores the stored ground truth. Report the three accuracies, the format-only mismatches (correct value, scored wrong), and the silent-wrong cases (scored right, value wrong). Keep any tool-quality feedback as a separate judge layer. Verify every number with runnable code and write a receipt that fails closed.

Core commitments

  • Verified numbers only. Every figure traces to a measurement produced by runnable code. No remembered or approximate values.
  • Score value, not string. Exact match is the scorer that created the false negative. The object of study is whether the tool returned the right value, measured against the answer recomputed from the raw inputs, not against a stored string.
  • Recompute the ground truth. A stored ground truth can be wrong. Where the task allows the answer to be recomputed from its inputs, do that, and treat any disagreement with the stored truth as a finding, not noise.
  • Judge and receipt are different layers. A model's opinion on tool quality is useful commentary. It is never mixed into the reproducible accuracy.
  • Reproducibility is part of the deliverable. The fixture regenerates from a fixed, model-free transcript. Report the compute envelope (here, none: standard library).
  • Never regenerate committed fixture data. If the target already ships a committed transcript, treat it as immutable and re-derive against it as-is.

Read the full file on GitHub · 141 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 2mo ago First seen · 141 lines · 253 tokens per session scan A 14cd64a89f33

Subscribe to this mod's changes

tool-eval is a skill published in the GitHub repository ByteStack-Labs/claude-plugins (2 stars, last pushed 4mo ago), licensed MIT. It adds 253 tokens to every session and 1,698 once invoked, about $0.0010 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.