Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add wanshuiyin/Anti-Autoresearch --skill experiment-forensicsgit clone --depth 1 https://github.com/wanshuiyin/Anti-AutoresearchWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/wanshuiyin/anti-autoresearch/experiment-forensics)<a href="https://agentmods.dev/skills/wanshuiyin/anti-autoresearch/experiment-forensics"><img src="https://agentmods.dev/badge/skills/wanshuiyin/anti-autoresearch/experiment-forensics/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/wanshuiyin/anti-autoresearch/experiment-forensics"><img src="https://agentmods.dev/badge/skills/wanshuiyin/anti-autoresearch/experiment-forensics.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 2 findings, up to high
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- high Anti-Refusal · line 326 Skill instructs the agent to omit warnings, disclaimers, or ethical commentary. Stripping safety caveats hides risk from the user and is a common jailbreak preamble.Fix: Remove instructions that suppress warnings, disclaimers, or ethical commentary. Let the agent surface safety-relevant caveats to the user.
- high Anti-Refusal · line 364 Skill instructs the agent to omit warnings, disclaimers, or ethical commentary. Stripping safety caveats hides risk from the user and is a common jailbreak preamble.Fix: Remove instructions that suppress warnings, disclaimers, or ethical commentary. Let the agent surface safety-relevant caveats to the user.
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00237 | $0.13915 |
| Opus 5 | $0.00118 | $0.06957 |
| Sonnet 5 | $0.00047 | $0.02783 |
| Haiku 4.5 | $0.00024 | $0.01392 |
Grade A, and why
experiment-forensics scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 13d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Runs shell commandslowCapability
Expected in a hook, worth knowing in a rule or an instructions file.
hits = subprocess.run(["grep", "-rIn", "--", tok, f"{t}/results", f"{t}/outputs", f"{t}/logs"], Copies of this mod
1 near-identical copy found in the catalogue:
- experiment-forensics — 94% identical, 52 lines differ
How it starts
The opening of the file, as written. The whole thing — 791 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Experiment Forensics — are the reported results what the code computes?
Audit experiment integrity for: $ARGUMENTS (a paper-dir or repo-dir; use an
ABSOLUTE path — it is referred to as TARGET below). Emit span-anchored
experiment-forensics.findings.json.
🔒 Do not wrap this skill in
/loop,/schedule, orCronCreate. It is verdict-bearing input — it proposes the findings the deterministic adjudicator turns into the report. Re-firing it on a wall-clock timer adds no signal: what unlocks new conclusions is a higher observability level (a repo / result files arriving → L2), not elapsed time. Schedule the external wait that precedes it — artifacts released → run once at the new level. (Mirrors ARIS's external-cadence doctrine.)
Adapted from ARIS
experiment-audit(#57/#131), reframed for the reviewer side. The original audits your own experiment before you claim results; this audits a third party's submission. The crucial reframe: at L0/L1 (no code) these patterns are not decidable — they appear only as info-level "could-not-verify" signals. Code-level fraud requires L2. A PDF can never produce a fraud verdict.
Why this exists
LLM-driven research pipelines (and rushed human work) produce results that look computed but are not what the paper claims. The repeatable failure modes — ported from ARIS's experiment-integrity audit — are:
- Fake ground truth — the eval "reference/target" is derived from model
outputs and reported as performance, not as a labeled proxy.
HP-FAKE-GT - Score self-normalization — a metric divided by the model's own max/min/
mean to approach 1.0; no raw score shown.
HP-SELF-NORM - Phantom results — a paper number maps to a result file or metric key that
does not exist (or a function never called).
HP-PHANTOM-RESULT - Dead metric code — a metric defined in eval code, discussed in the paper,
but never called / never present in any result file.
HP-DEAD-METRIC - Scope inflation (verified) — "comprehensive/robust/SOTA" while the repo
actually ran 1–2 datasets/seeds/configs.
HP-SCOPE-INFLATE - Method drift (confirmed) — the method described differs from the method
evaluated (A-lite, A+oracle, extra data, different backbone, test-time labels
the method claims not to use).
HP-METHOD-DRIFT - Synthesized-looking results — numbers across configs related by a too-clean
arithmetic pattern ("不像跑出来的").
HP-SUSPICIOUS-REGULARITY - Placeholder / fake data in released code — the released code still ships
placeholder/dummy/fake data (e.g. a
# fake data for plottingannotation, aTODO: replace with real data, a hard-codednp.random.*array) and a reported figure/number is drawn from it rather than from a real run.HP-PLACEHOLDER-DATA(flag the checkable code marker; do not infer who wrote it) - Result ≠ artifact — the code / result artifacts, read or run as released, produce
numbers different from the paper's reported values for the same experiment.
HP-RESULT-ARTIFACT-MISMATCH(an implementation that computes a different loss/normalization/architecture than the equations state isHP-METHOD-DRIFT, not this) - Missing reproducibility artifacts — an empirical / agent / LLM paper ships
neither code nor the prompts/configs/hyperparameters its results depend on, so the
claim cannot be reproduced even in principle (the absence is L0-stated; what its
results specifically need is L2-verified).
HP-MISSING-REPRO-ARTIFACT
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 13d ago First seen · 791 lines · 237 tokens per session scan A fdeb56ec8ffc
experiment-forensics is a skill published in the GitHub repository wanshuiyin/Anti-Autoresearch (153 stars, last pushed 3d ago), licensed MIT. It adds 237 tokens to every session and 13,915 once invoked, about $0.0012 per session on Opus 5. A static security scan graded it A with 1 finding (runs shell commands). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
research-sop
Run an end-to-end, auditable research workflow from question framing through literature, competing hypotheses, experiment selection, implementation, verification, and claim handoff. Use whenever the user asks to investigate, compare, test, validate, or establish an empirical research claim, including when they do not…
preregister
Lock a confirmatory falsification target and its fixed multiple-comparison family before observing the confirmatory result. Use before promoting an exploratory finding to a main claim or whenever several related hypotheses need Bonferroni control. Records metric, threshold, family id/size, correction, and seed budget.
prove-sop
Build and audit a statistical or mathematical proof from proposition capture through skeleton selection, diagnosis, correction, optional empirical checking, and optional Lean reinsurance. Use when the user asks to prove or rigorously derive a proposition, a graph proposition lacks a verified proof, or a reviewer…
proof-checker
A rigorous proof-checking and repair skill for LaTeX mathematics. LaTeX is a text format commonly used to write mathematical documents.
paper-illustration
A tool for creating academic-paper illustrations such as architecture diagrams and method figures with Gemini image generation and Claude-guided revisions.
paper-navigator
Find and read academic papers: disambiguate queries, discover papers (search, citation traversal, recommendations, arXiv monitoring, trending, GitHub search), evaluate (TLDR, citations, code, SOTA), and read with structured analysis (3-level strategy). Use when: finding papers, reading a paper, related work, citation…