Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add ww-w-ai/bkit-claude-code --skill bkit-evalsgit clone --depth 1 https://github.com/ww-w-ai/bkit-claude-codeWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/ww-w-ai/bkit-claude-code/bkit-evals)<a href="https://agentmods.dev/skills/ww-w-ai/bkit-claude-code/bkit-evals"><img src="https://agentmods.dev/badge/skills/ww-w-ai/bkit-claude-code/bkit-evals.svg" alt="Measured on agentmods" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 1 finding, up to medium
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- medium analysis-evasion · line 1 Suspicious Unicode normalization or mixed-script contentFix: Review the flagged content for security risks. Ensure no credentials, secrets, or sensitive data are exposed.
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00047 | $0.01073 |
| Opus 5 | $0.00023 | $0.00536 |
| Sonnet 5 | $0.00009 | $0.00215 |
| Haiku 4.5 | $0.00005 | $0.00107 |
Grade A, and why
bkit-evals scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 8d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Runs shell commandslowCapability
Expected in a hook, worth knowing in a rule or an instructions file.
2. Spawn `node evals/runner.js --skill <skill>` via `child_process.spawnSync` How it starts
The opening of the file, as written. The whole thing — 122 lines — stays where its author put it; the contents beside it link to each section on GitHub.
bkit Evals — Skill Quality Evaluation Runner
v2.1.11 Sprint β FR-β2. Wraps
evals/runner.jswith input validation, result persistence, and structured reporting. Replaces the barenode evals/runner.js <skill>invocation that previously required users to remember argv structure and ignored timeout / sandbox concerns.
Arguments
| Argument | Description | Example |
|---|---|---|
run <skill> |
Execute the eval suite for one skill | /bkit-evals run gap-detector |
list |
List all skills that have an eval.yaml definition |
/bkit-evals list |
If no argument is provided, render the same output as list.
Behavior
run <skill>
- Validate
skillagainst/^[a-z][a-z0-9-]{0,63}$/. Reject anything else (no shell metacharacters, no slashes, no spaces) — see Security below. - Spawn
node evals/runner.js --skill <skill>viachild_process.spawnSync(argv form, no shell). Default timeout 30 s, max 120 s. The--skillflag form is mandated by the runner CLI and locked by L3 contract test. - Capture stdout / stderr. Parse the trailing JSON block via balanced-brace fallback (string-aware).
- Apply fail-closed defense: if
parsed === nulland stdout includesUsage:, returnreason: 'argv_format_mismatch'; ifparsed === nullotherwise, returnreason: 'parsed_null'. Exit code 0 alone NEVER implies success — the parsed JSON must be present. - Persist the structured result to
.bkit/runtime/evals-{skill}-{ISO timestamp}.jsonwith stdout/stderr tails (2000 chars each),parsedpayload, andreasonfield. - Render a one-line summary in the chat:
- exit code
- parsed pass/fail counts (if available)
- path of the persisted result file
list
- Read
evals/config.jsonto enumerate skill classifications. - For each classification (
workflow,capability,hybrid), list skills that haveevals/{classification}/{skill}/eval.yaml. - Render a category-grouped table with skill name + a one-line note from
the eval YAML (
descriptionfield if present).
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 8d ago First seen · 122 lines · 47 tokens per session scan A 15de81dd9fd9
bkit-evals is a skill published in the GitHub repository ww-w-ai/bkit-claude-code (595 stars, last pushed yesterday), licensed Apache-2.0. It adds 47 tokens to every session and 1,073 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it A with 1 finding (runs shell commands). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
bare-eval
Run isolated eval and grading calls using CC 2.1.81 --bare mode. Constructs claude -p --bare invocations for skill evaluation, trigger testing, and LLM grading without plugin/hook interference. Use when running eval pipelines, grading skill outputs, benchmarking prompt quality, or testing trigger accuracy in isolation.
CI Pipeline Optimizer
Optimize CI test pipelines through intelligent test splitting, parallelization, caching strategies, and selective test execution based on code changes.
CI/CD Pipeline Advanced
Expert-level CI/CD pipeline skill for test automation. Covers GitHub Actions, Jenkins, GitLab CI, Azure DevOps, parallel execution, matrix strategies, caching, artifact management, and deployment gates.
CI/CD Pipeline Config
CI/CD pipeline configuration skill for test automation, covering GitHub Actions, Jenkins, GitLab CI, test parallelization, reporting, and artifact management.
plan
Analyzes architecture, selects patterns, assesses testability, then decomposes work into ordered TDD tasks with exact verification commands and explicit acceptance mapping. Works from an approved spec (zuvo:brainstorm output) or directly from a user-provided description.
code-auditor
Independent pre-merge review of a git diff, PR, or named files. Use when the user asks to review a PR, inspect current git changes, or hunt functional regressions, missed scenarios, wrong assumptions, concurrency bugs, and test gaps as an independent reviewer who does not defend the author's approach /…