Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add malloydata/publisher --skill eval-diagnosegit clone --depth 1 https://github.com/malloydata/publisherWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/malloydata/publisher/eval-diagnose)<a href="https://agentmods.dev/skills/malloydata/publisher/eval-diagnose"><img src="https://agentmods.dev/badge/skills/malloydata/publisher/eval-diagnose/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/malloydata/publisher/eval-diagnose"><img src="https://agentmods.dev/badge/skills/malloydata/publisher/eval-diagnose.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector pass
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00093 | $0.06001 |
| Opus 5.5 | $0.00037 | $0.02400 |
| Sonnet 5.5 | $0.00019 | $0.01200 |
| Haiku 4.5 | $0.00009 | $0.00600 |
Grade A, and why
eval-diagnose scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 11d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 430 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Diagnose One Answer
Consumes a score event from skill:eval-answer and answers: why did this fail,
and who owns the fix?
Scope boundary: write the diagnosis before any edit exists. This skill never edits a model and never proposes a patch beyond naming the gap. Diagnosis that is allowed to edit becomes justification for an edit somebody already wanted.
Do not diagnose a contaminated attempt or an environment failure. Those are harness or ops, not model work.
Which cases. no_match on the dev split, which is what diagnose.py
selects by default. One exception, and it needs two arms to earn it: a case that
came back near_match in BOTH runs of a pair is not the judge hedging, it is
the model failing to distinguish two readings the question does, and no rubric
repair closes that. Take the stable list flip_table.py prints and pass
--only <qids> --verdicts near_match. Never diagnose a one-armed near_match;
that is noise, and it sends an agent to fix a model that is already right.
A correct answer can still carry a finding. A case that answered right
while a required entity never reached it is diagnosed too, for the retrieval
miss alone, and diagnose.py selects it automatically. The answer was right by
another route, and naming that route is the job: on the run this rule comes
from it was always the same one, the agent rebuilding the model's own measure
inline. That held while the measure was count() and failed the moment one
carried a grain rule, producing the run's only wrong answer. Three of the four
findings in that run sat on passing cases and, before this, produced nothing.
"It worked anyway" is not a reason to leave the model or the skills
unfixed. An answer that is right without the model's own entity is right for
now, not right by design. Write the issue against the miss, record that the
answer was correct so nobody reads it as a wrong number, and do not soften the
finding because the number came out right. --no-retrieval-misses opts out for
a run that only wants answer failures.
Holdout is withheld so the acceptance check keeps something the improve step
never saw. A measure-only run never reaches improve, so it is holding those
cases back from nothing: pass --include-holdout there. The script refuses it
on a run that already carries a candidate, because that run's holdout is the
only thing left that can falsify the edit.
Say what the clusters do not cover. diagnose.py prints a coverage account
of every non-passing case and which bucket it fell in -- holdout, contaminated,
a verdict outside --verdicts, unscored, or selected and not diagnosed. Quote
it whenever you report clusters. One run's six clusters were read as covering
its failures; they covered 8 of 18, and each individual exclusion had been
correct and added up nowhere.
What ships with it
5 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 11d ago Changed bc3efa430335
- 13d ago Changed · +25 lines 7fd19a216e39
- 20d ago Changed 8093b6ff33aa
- 24d ago Changed ced647f0f92d
- 1mo ago Changed 2427542b9cc4
- 1mo ago Changed · +15 lines a46c960ae6b7
- 1mo ago Changed · +45 lines 84ea16e5a86c
- 1mo ago Changed · +97 lines 4024ca5aefcf
- 1mo ago First seen · 248 lines · 93 tokens per session scan A fb39b1400e2c
eval-diagnose is a skill published in the GitHub repository malloydata/publisher (118 stars, last pushed today), licensed MIT. It adds 93 tokens to every session and 6,001 once invoked, about $0.0004 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-03.
Other skills, from other repositories
dbt-expert
Expert-level dbt (data build tool), models, tests, documentation, incremental models, macros, and Jinja templating. Use when the user mentions analytics engineering, SQL, data transformation, Jinja, or testing, or when the task involves Project Structure and Configuration, Sources and Staging Models, Intermediate and…
reimagine-it-extract
Emit the content signals reimagine-it reads from an HTML file — title, anchors, proper nouns, dates, numbers, emails, links, source hex colors, and the derived palette — as JSON without generating a redesign. Use when the user says /reimagine-it extract, "what does the engine see in this page", "extract the palette"…
reimagine-it-audit
Design Health — runs 19 deterministic quality checks on HTML output. Use when the user says /reimagine-it audit, "audit this page", "check design quality", or wants to verify craft-floor compliance before shipping. Catches blank plates, missing focus rings, non-compositor motion, off-palette accents, dead motion…
data-validation-contracts
Use when data crosses a boundary into your code (file, API, warehouse table, upload, model input or output), when a join or cleaning step can change row counts, or when adding pandera, Great Expectations, Pydantic or dbt checks.
reusable-visualization
Build ONE reusable chart visualization component that receives its data and its settings from the host application instead of fetching them, and declares the fields and config options the host exposes to viewers. Use this whenever a single chart component is reused across many different queries rather than built for…
developing-in-lightdash
Use when reading, creating, and editing Lightdash dashboards and charts as JSON, including dashboard layout and chart-type-specific configuration.