experiment-forensics

experiment-forensics is a skill for Claude Code from wanshuiyin/Anti-Autoresearch. It costs 237 tokens per session (13,915 once invoked), scanned A, original, MIT.

A review method for checking whether reported experiment results are supported by the code and result files. An evidence ledger is a record linking claims to the files or data that support them.

In plain words
What is it for?
It helps audit experiment code and reported numbers, with deeper checks when the repository and result files are available.
Why use it?
It can reveal made-up results, incorrect ground truth, self-adjusted scores, unused measurement code, and claims that cannot be verified from the available evidence.

Skill for Claude Code

Written for Claude Code: allowed-tools in frontmatter. Also seen: mentions Codex.

Good fit It helps audit experiment code and reported numbers, with deeper checks when the repository and result files are available.

Compare 6 skills from other repositories ↓
Install with agentmods
npx agentmods add skills/wanshuiyin/anti-autoresearch/experiment-forensics
Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent
npx skills add wanshuiyin/Anti-Autoresearch --skill experiment-forensics
Clone the repo
git clone --depth 1 https://github.com/wanshuiyin/Anti-Autoresearch

Made for: Claude Code.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for experiment-forensics

README.md
[![agentmods](https://agentmods.dev/badge/skills/wanshuiyin/anti-autoresearch/experiment-forensics/github.svg)](https://agentmods.dev/skills/wanshuiyin/anti-autoresearch/experiment-forensics)
Your own site
<a href="https://agentmods.dev/skills/wanshuiyin/anti-autoresearch/experiment-forensics"><img src="https://agentmods.dev/badge/skills/wanshuiyin/anti-autoresearch/experiment-forensics/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for experiment-forensics

Your own site · 80×15
<a href="https://agentmods.dev/skills/wanshuiyin/anti-autoresearch/experiment-forensics"><img src="https://agentmods.dev/badge/skills/wanshuiyin/anti-autoresearch/experiment-forensics.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 237 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 13,915 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 1 finding. A grade says what 26 rules found in the file — not that it is safe. Third-party audits
  • NVIDIA SkillSpector warn 7 Sept 2026
SkillSpector: 2 findings, up to high

These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →

  • high Anti-Refusal · line 326
    Skill instructs the agent to omit warnings, disclaimers, or ethical commentary. Stripping safety caveats hides risk from the user and is a common jailbreak preamble.
    Fix: Remove instructions that suppress warnings, disclaimers, or ethical commentary. Let the agent surface safety-relevant caveats to the user.
  • high Anti-Refusal · line 364
    Skill instructs the agent to omit warnings, disclaimers, or ethical commentary. Stripping safety caveats hides risk from the user and is a common jailbreak preamble.
    Fix: Remove instructions that suppress warnings, disclaimers, or ethical commentary. Let the agent surface safety-relevant caveats to the user.
How audits are shown
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00237 $0.13915
Opus 5 $0.00118 $0.06957
Sonnet 5 $0.00047 $0.02783
Haiku 4.5 $0.00024 $0.01392

Measured 13d ago against content hash fdeb56ec8ffc, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-12, from the pricing page.

Security

Grade A, and why

experiment-forensics scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 13d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Runs shell commandslowCapability

Expected in a hook, worth knowing in a rule or an instructions file.

hits = subprocess.run(["grep", "-rIn", "--", tok, f"{t}/results", f"{t}/outputs", f"{t}/logs"],
Origin

Copies of this mod

1 near-identical copy found in the catalogue:

skills/experiment-forensics/SKILL.md · 791 lines

How it starts

The opening of the file, as written. The whole thing — 791 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Experiment Forensics — are the reported results what the code computes?

Audit experiment integrity for: $ARGUMENTS (a paper-dir or repo-dir; use an ABSOLUTE path — it is referred to as TARGET below). Emit span-anchored experiment-forensics.findings.json.

🔒 Do not wrap this skill in /loop, /schedule, or CronCreate. It is verdict-bearing input — it proposes the findings the deterministic adjudicator turns into the report. Re-firing it on a wall-clock timer adds no signal: what unlocks new conclusions is a higher observability level (a repo / result files arriving → L2), not elapsed time. Schedule the external wait that precedes it — artifacts released → run once at the new level. (Mirrors ARIS's external-cadence doctrine.)

Adapted from ARIS experiment-audit (#57/#131), reframed for the reviewer side. The original audits your own experiment before you claim results; this audits a third party's submission. The crucial reframe: at L0/L1 (no code) these patterns are not decidable — they appear only as info-level "could-not-verify" signals. Code-level fraud requires L2. A PDF can never produce a fraud verdict.

Why this exists

LLM-driven research pipelines (and rushed human work) produce results that look computed but are not what the paper claims. The repeatable failure modes — ported from ARIS's experiment-integrity audit — are:

  1. Fake ground truth — the eval "reference/target" is derived from model outputs and reported as performance, not as a labeled proxy. HP-FAKE-GT
  2. Score self-normalization — a metric divided by the model's own max/min/ mean to approach 1.0; no raw score shown. HP-SELF-NORM
  3. Phantom results — a paper number maps to a result file or metric key that does not exist (or a function never called). HP-PHANTOM-RESULT
  4. Dead metric code — a metric defined in eval code, discussed in the paper, but never called / never present in any result file. HP-DEAD-METRIC
  5. Scope inflation (verified) — "comprehensive/robust/SOTA" while the repo actually ran 1–2 datasets/seeds/configs. HP-SCOPE-INFLATE
  6. Method drift (confirmed) — the method described differs from the method evaluated (A-lite, A+oracle, extra data, different backbone, test-time labels the method claims not to use). HP-METHOD-DRIFT
  7. Synthesized-looking results — numbers across configs related by a too-clean arithmetic pattern ("不像跑出来的"). HP-SUSPICIOUS-REGULARITY
  8. Placeholder / fake data in released code — the released code still ships placeholder/dummy/fake data (e.g. a # fake data for plotting annotation, a TODO: replace with real data, a hard-coded np.random.* array) and a reported figure/number is drawn from it rather than from a real run. HP-PLACEHOLDER-DATA (flag the checkable code marker; do not infer who wrote it)
  9. Result ≠ artifact — the code / result artifacts, read or run as released, produce numbers different from the paper's reported values for the same experiment. HP-RESULT-ARTIFACT-MISMATCH (an implementation that computes a different loss/normalization/architecture than the equations state is HP-METHOD-DRIFT, not this)
  10. Missing reproducibility artifacts — an empirical / agent / LLM paper ships neither code nor the prompts/configs/hyperparameters its results depend on, so the claim cannot be reproduced even in principle (the absence is L0-stated; what its results specifically need is L2-verified). HP-MISSING-REPRO-ARTIFACT

Read the full file on GitHub · 791 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 13d ago First seen · 791 lines · 237 tokens per session scan A fdeb56ec8ffc

Subscribe to this mod's changes

experiment-forensics is a skill published in the GitHub repository wanshuiyin/Anti-Autoresearch (153 stars, last pushed 3d ago), licensed MIT. It adds 237 tokens to every session and 13,915 once invoked, about $0.0012 per session on Opus 5. A static security scan graded it A with 1 finding (runs shell commands). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Related

Other skills, from other repositories

research-sop

Run an end-to-end, auditable research workflow from question framing through literature, competing hypotheses, experiment selection, implementation, verification, and claim handoff. Use whenever the user asks to investigate, compare, test, validate, or establish an empirical research claim, including when they do not…

whenpoem/aiscientist · 85 tokens

preregister

Lock a confirmatory falsification target and its fixed multiple-comparison family before observing the confirmatory result. Use before promoting an exploratory finding to a main claim or whenever several related hypotheses need Bonferroni control. Records metric, threshold, family id/size, correction, and seed budget.

whenpoem/aiscientist · 62 tokens

prove-sop

Build and audit a statistical or mathematical proof from proposition capture through skeleton selection, diagnosis, correction, optional empirical checking, and optional Lean reinsurance. Use when the user asks to prove or rigorously derive a proposition, a graph proposition lacks a verified proof, or a reviewer…

whenpoem/aiscientist · 64 tokens

proof-checker

A rigorous proof-checking and repair skill for LaTeX mathematics. LaTeX is a text format commonly used to write mathematical documents.

AI4Scientist/nano-scientist · 90 tokens

paper-illustration

A tool for creating academic-paper illustrations such as architecture diagrams and method figures with Gemini image generation and Claude-guided revisions.

AI4Scientist/nano-scientist · 67 tokens

paper-navigator

Find and read academic papers: disambiguate queries, discover papers (search, citation traversal, recommendations, arXiv monitoring, trending, GitHub search), evaluate (TLDR, citations, code, SOTA), and read with structured analysis (3-level strategy). Use when: finding papers, reading a paper, related work, citation…

AI4Scientist/nano-scientist · 141 tokens