bkit-evals

bkit-evals is a skill for Claude Code from ww-w-ai/bkit-claude-code. It costs 47 tokens per session (1,073 once invoked), scanned A, original, Apache-2.0.

A command-line tool for running automated checks that measure the quality of coding-agent skills.

In plain words
What is it for?
Use it to list skills with an eval.yaml test definition or run the evaluation suite for one named skill.
Why use it?
It validates skill names, applies time limits, captures results, and reports failures in a structured way instead of making you manage the test runner manually.

Skill for Claude Code

Written for Claude Code: allowed-tools in frontmatter.

Part of the bkit plugin — 44 skills, 2 commands, 34 agents, 21 hooks shipped together

Good fit Use it to list skills with an eval.yaml test definition or run the evaluation suite for one named skill.

Compare 6 skills from other repositories ↓
Install with agentmods
npx agentmods add skills/ww-w-ai/bkit-claude-code/bkit-evals
Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent
npx skills add ww-w-ai/bkit-claude-code --skill bkit-evals
Clone the repo
git clone --depth 1 https://github.com/ww-w-ai/bkit-claude-code

Made for: Claude Code.

Or install bkit, the plugin that ships this one along with the rest of its 44 skills, 2 commands, 34 agents, 21 hooks.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for bkit-evals

README.md
[![agentmods](https://agentmods.dev/badge/skills/ww-w-ai/bkit-claude-code/bkit-evals.svg)](https://agentmods.dev/skills/ww-w-ai/bkit-claude-code/bkit-evals)
Your own site
<a href="https://agentmods.dev/skills/ww-w-ai/bkit-claude-code/bkit-evals"><img src="https://agentmods.dev/badge/skills/ww-w-ai/bkit-claude-code/bkit-evals.svg" alt="Measured on agentmods" height="20"></a>
Per session 47 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 1,073 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 1 finding. A grade says what 26 rules found in the file — not that it is safe. Third-party audits
  • NVIDIA SkillSpector warn 7 Sept 2026
SkillSpector: 1 finding, up to medium

These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →

  • medium analysis-evasion · line 1
    Suspicious Unicode normalization or mixed-script content
    Fix: Review the flagged content for security risks. Ensure no credentials, secrets, or sensitive data are exposed.
How audits are shown
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00047 $0.01073
Opus 5 $0.00023 $0.00536
Sonnet 5 $0.00009 $0.00215
Haiku 4.5 $0.00005 $0.00107

Measured 8d ago against content hash 15de81dd9fd9, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-07, from the pricing page.

Security

Grade A, and why

bkit-evals scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 8d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Runs shell commandslowCapability

Expected in a hook, worth knowing in a rule or an instructions file.

2. Spawn `node evals/runner.js --skill <skill>` via `child_process.spawnSync`
skills/bkit-evals/SKILL.md · 122 lines

How it starts

The opening of the file, as written. The whole thing — 122 lines — stays where its author put it; the contents beside it link to each section on GitHub.

bkit Evals — Skill Quality Evaluation Runner

v2.1.11 Sprint β FR-β2. Wraps evals/runner.js with input validation, result persistence, and structured reporting. Replaces the bare node evals/runner.js <skill> invocation that previously required users to remember argv structure and ignored timeout / sandbox concerns.

Arguments

Argument Description Example
run <skill> Execute the eval suite for one skill /bkit-evals run gap-detector
list List all skills that have an eval.yaml definition /bkit-evals list

If no argument is provided, render the same output as list.

Behavior

run <skill>

  1. Validate skill against /^[a-z][a-z0-9-]{0,63}$/. Reject anything else (no shell metacharacters, no slashes, no spaces) — see Security below.
  2. Spawn node evals/runner.js --skill <skill> via child_process.spawnSync (argv form, no shell). Default timeout 30 s, max 120 s. The --skill flag form is mandated by the runner CLI and locked by L3 contract test.
  3. Capture stdout / stderr. Parse the trailing JSON block via balanced-brace fallback (string-aware).
  4. Apply fail-closed defense: if parsed === null and stdout includes Usage:, return reason: 'argv_format_mismatch'; if parsed === null otherwise, return reason: 'parsed_null'. Exit code 0 alone NEVER implies success — the parsed JSON must be present.
  5. Persist the structured result to .bkit/runtime/evals-{skill}-{ISO timestamp}.json with stdout/stderr tails (2000 chars each), parsed payload, and reason field.
  6. Render a one-line summary in the chat:
    • exit code
    • parsed pass/fail counts (if available)
    • path of the persisted result file

list

  1. Read evals/config.json to enumerate skill classifications.
  2. For each classification (workflow, capability, hybrid), list skills that have evals/{classification}/{skill}/eval.yaml.
  3. Render a category-grouped table with skill name + a one-line note from the eval YAML (description field if present).

Read the full file on GitHub · 122 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 8d ago First seen · 122 lines · 47 tokens per session scan A 15de81dd9fd9

Subscribe to this mod's changes

bkit-evals is a skill published in the GitHub repository ww-w-ai/bkit-claude-code (595 stars, last pushed yesterday), licensed Apache-2.0. It adds 47 tokens to every session and 1,073 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it A with 1 finding (runs shell commands). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Related

Other skills, from other repositories

bare-eval

Run isolated eval and grading calls using CC 2.1.81 --bare mode. Constructs claude -p --bare invocations for skill evaluation, trigger testing, and LLM grading without plugin/hook interference. Use when running eval pipelines, grading skill outputs, benchmarking prompt quality, or testing trigger accuracy in isolation.

yonatangross/orchestkit · 69 tokens

CI Pipeline Optimizer

Optimize CI test pipelines through intelligent test splitting, parallelization, caching strategies, and selective test execution based on code changes.

PramodDutta/qaskills · 29 tokens

CI/CD Pipeline Advanced

Expert-level CI/CD pipeline skill for test automation. Covers GitHub Actions, Jenkins, GitLab CI, Azure DevOps, parallel execution, matrix strategies, caching, artifact management, and deployment gates.

PramodDutta/qaskills · 45 tokens

CI/CD Pipeline Config

CI/CD pipeline configuration skill for test automation, covering GitHub Actions, Jenkins, GitLab CI, test parallelization, reporting, and artifact management.

PramodDutta/qaskills · 35 tokens

plan

Analyzes architecture, selects patterns, assesses testability, then decomposes work into ordered TDD tasks with exact verification commands and explicit acceptance mapping. Works from an approved spec (zuvo:brainstorm output) or directly from a user-provided description.

greglas75/zuvo · 53 tokens

code-auditor

Independent pre-merge review of a git diff, PR, or named files. Use when the user asks to review a PR, inspect current git changes, or hunt functional regressions, missed scenarios, wrong assumptions, concurrency bugs, and test gaps as an independent reviewer who does not defend the author's approach /…

bahayonghang/my-ai-cli-toolkit · 176 tokens