auto-verify

auto-verify is a skill for Claude Code, Codex from zjunlp/Mechanist. It costs 340 tokens per session (28,055 once invoked), scanned C, original, MIT.

A research workflow that tests a claim again after changing its method, dataset, or model, then compares each result with the original experiment.

In plain words
What is it for?
Use it to measure how robust each claim is, where robustness means that enough valid alternative tests reach the same conclusion.
Why use it?
It shows whether a conclusion still holds under different conditions instead of relying on one experiment.

Skill for Claude CodeCodex

Part of the mechanist plugin — 54 skills, 4 agents shipped together

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add skills/zjunlp/mechanist/auto-verify
Any agent
npx skills add zjunlp/Mechanist --skill auto-verify
Clone the repo
git clone --depth 1 https://github.com/zjunlp/Mechanist

Made for: Claude Code, Codex.

Or install mechanist, the plugin that ships this one along with the rest of its 54 skills, 4 agents.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for auto-verify

README.md
[![agentmods](https://agentmods.dev/badge/skills/zjunlp/mechanist/auto-verify.svg)](https://agentmods.dev/skills/zjunlp/mechanist/auto-verify)
Your own site
<a href="https://agentmods.dev/skills/zjunlp/mechanist/auto-verify"><img src="https://agentmods.dev/badge/skills/zjunlp/mechanist/auto-verify.svg" alt="Measured on agentmods" height="20"></a>
Per session 340 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 28,055 The whole file, excluding the scripts and references it only reads on demand.
Security scan C 1 finding. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00340 $0.28055
Opus 5 $0.00170 $0.14028
Sonnet 5 $0.00068 $0.05611
Haiku 4.5 $0.00034 $0.02806

Measured 5d ago against content hash 2a2cffbcea94, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-05, from the pricing page.

Security

Grade C, and why

auto-verify scanned grade C with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 5d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Tells the agent never to refusehighAnti-refusal

Suppressing the ability to decline removes a core safety control; a later harmful request then succeeds.

> **Resource-Fidelity Harness does NOT apply to verify.** `refine-logs/FINAL_PROPOSAL.md` / `EXPERIMENT_PLAN.md` may carry a `resource_fidelity: strict` marker (written by `/auto-claim` for the reproduction combination —
skills/auto-verify/SKILL.md · 1,087 lines

How it starts

The opening of the file, as written. The whole thing — 1,087 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Workflow 1.75: Claim Verification

Stress-test claims by swapping method, dataset, and model — applied uniformly to every claim regardless of whether the main experiment supported or rejected it. Each variant runs, gets judged against the main experiment's verdict on the frozen claim, and contributes to a per-claim robustness score; the claim passes if robustness ≥ ROBUSTNESS_THRESHOLD (default 0.5).

For: $ARGUMENTS

Overview

/auto-experiment produces per-run verdicts; /result-to-claim turns them into per-claim support. This skill asks a narrower but harder question: does the variant reach the same conclusion as the main experiment when we change the method, the dataset, or the model?

Per-variant we judge agreement as binary (pass / fail) — there is no middle "partial" tier; anything short of unambiguous agreement counts as fail. Per claim we aggregate as robustness = #pass / N_eligible, counted over the variants whose integrity check passed. The claim PASSes iff robustness ≥ ROBUSTNESS_THRESHOLD (default 0.5 — at least half of eligible variants must pass; e.g. at N=3 this means ≥2 of 3), otherwise FAILs — unless the eligible set is empty, in which case the claim is ZERO_ELIGIBLE_VARIANTS (a distinct terminal state, see below).

The pipeline runs in three stages, with two integrity gates:

  1. Stage 1 — Setup & Gate (Phases 1–2). Parse arguments and identify target claims (no cap here — Stage 1 audits every target claim), then invoke two cross-model audits per claim on refine-logs/: /experiment-audit for evaluation methodology (fake GT, score normalization, phantom results, dead metric code, scope overclaim) and /mechanism-audit for mechanism-intervention rigor (steering coefficient sweep + reserved checks). The Phase 2 gate verdict for each claim is a single derived value combined = max_severity(exp.overall_verdict, mech.overall_verdict) with n/a (no mechanism intervention used) treated as pass. If combined = FAIL (i.e., at least one sub-audit returned FAIL → max_severity propagates FAIL), no PASS/FAIL on the claim is meaningful — the claim is marked INCONCLUSIVE here and Phase 3 step 0 short-circuits the rest of verify (Phases 3–10) to Phase 11 for that claim only. The inconclusive_reason names which sub-audit failed so iteration knows whether to fix evaluation, mechanism, or both.
  2. Stage 2 — Run variants (Phases 3–7). Phase 3 step 0 picks the top-K admitted claims by importance (K = MAX_VERIFY_CLAIMS, default 1) — un-picked ADMITTED claims are marked INTEGRITY_ONLY with stage2_skip_reason: max_verify_claims_cap and skip to Phase 11. For each picked claim, pick alternatives, critique the plan, implement and (optionally) code-review each variant, deploy. Stage 2 ends when all variants have completed and raw metrics are on disk — no LLM judgment yet. Stage 2's exit gate lets you eyeball raw variant numbers before letting Stage 3 interpret them.
  3. Stage 3 — Judge, Audit & Aggregate (Phases 8–11). For each variant of each picked claim, invoke /result-to-claim to judge whether its data supports the claim (Phase 8). Then run the variant-level integrity audit per claim (Phase 9) — symmetric to Phase 2, /experiment-audit + /mechanism-audit both run on the variant directory; each variant's integrity_status is the combined max_severity(exp, mech). Integrity-FAIL variants are excluded from both numerator AND denominator. Then compute robustness once on the post-audit eligible set and assign PASS / FAIL / ZERO_ELIGIBLE_VARIANTS (Phase 10). Finally write the report (Phase 11). If fewer than MIN_VARIANTS_FOR_VERDICT variants survive integrity (default MIN_VARIANTS_FOR_VERDICT=1, so only N_eligible = 0 triggers this), the claim is marked ZERO_ELIGIBLE_VARIANTS — variants did run, they just all failed integrity, so the iteration loop's instruction is "fix the variant evaluation, do not touch the main experiment."

Read the full file on GitHub · 1,087 lines

Files

What ships with it

1 file beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 5d ago First seen · 1,087 lines · 340 tokens per session scan C 2a2cffbcea94

Subscribe to this mod's changes

auto-verify is a skill published in the GitHub repository zjunlp/Mechanist (55 stars, last pushed 10d ago), licensed MIT. It adds 340 tokens to every session and 28,055 once invoked, about $0.0017 per session on Opus 5. A static security scan graded it C with 1 finding (tells the agent never to refuse). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Related

Other skills, from other repositories