Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/zjunlp/mechanist/auto-verifynpx skills add zjunlp/Mechanist --skill auto-verifygit clone --depth 1 https://github.com/zjunlp/MechanistWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/zjunlp/mechanist/auto-verify)<a href="https://agentmods.dev/skills/zjunlp/mechanist/auto-verify"><img src="https://agentmods.dev/badge/skills/zjunlp/mechanist/auto-verify.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00340 | $0.28055 |
| Opus 5 | $0.00170 | $0.14028 |
| Sonnet 5 | $0.00068 | $0.05611 |
| Haiku 4.5 | $0.00034 | $0.02806 |
Grade C, and why
auto-verify scanned grade C with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 5d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Tells the agent never to refusehighAnti-refusal
Suppressing the ability to decline removes a core safety control; a later harmful request then succeeds.
> **Resource-Fidelity Harness does NOT apply to verify.** `refine-logs/FINAL_PROPOSAL.md` / `EXPERIMENT_PLAN.md` may carry a `resource_fidelity: strict` marker (written by `/auto-claim` for the reproduction combination — How it starts
The opening of the file, as written. The whole thing — 1,087 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Workflow 1.75: Claim Verification
Stress-test claims by swapping method, dataset, and model — applied uniformly to every claim regardless of whether the main experiment supported or rejected it. Each variant runs, gets judged against the main experiment's verdict on the frozen claim, and contributes to a per-claim robustness score; the claim passes if robustness ≥ ROBUSTNESS_THRESHOLD (default 0.5).
For: $ARGUMENTS
Overview
/auto-experiment produces per-run verdicts; /result-to-claim turns them into per-claim support. This skill asks a narrower but harder question: does the variant reach the same conclusion as the main experiment when we change the method, the dataset, or the model?
Per-variant we judge agreement as binary (pass / fail) — there is no middle "partial" tier; anything short of unambiguous agreement counts as fail. Per claim we aggregate as robustness = #pass / N_eligible, counted over the variants whose integrity check passed. The claim PASSes iff robustness ≥ ROBUSTNESS_THRESHOLD (default 0.5 — at least half of eligible variants must pass; e.g. at N=3 this means ≥2 of 3), otherwise FAILs — unless the eligible set is empty, in which case the claim is ZERO_ELIGIBLE_VARIANTS (a distinct terminal state, see below).
The pipeline runs in three stages, with two integrity gates:
- Stage 1 — Setup & Gate (Phases 1–2). Parse arguments and identify target claims (no cap here — Stage 1 audits every target claim), then invoke two cross-model audits per claim on
refine-logs/:/experiment-auditfor evaluation methodology (fake GT, score normalization, phantom results, dead metric code, scope overclaim) and/mechanism-auditfor mechanism-intervention rigor (steering coefficient sweep + reserved checks). The Phase 2 gate verdict for each claim is a single derived valuecombined = max_severity(exp.overall_verdict, mech.overall_verdict)withn/a(no mechanism intervention used) treated aspass. Ifcombined = FAIL(i.e., at least one sub-audit returned FAIL → max_severity propagates FAIL), no PASS/FAIL on the claim is meaningful — the claim is marked INCONCLUSIVE here and Phase 3 step 0 short-circuits the rest of verify (Phases 3–10) to Phase 11 for that claim only. Theinconclusive_reasonnames which sub-audit failed so iteration knows whether to fix evaluation, mechanism, or both. - Stage 2 — Run variants (Phases 3–7). Phase 3 step 0 picks the top-K admitted claims by importance (K =
MAX_VERIFY_CLAIMS, default 1) — un-picked ADMITTED claims are markedINTEGRITY_ONLYwithstage2_skip_reason: max_verify_claims_capand skip to Phase 11. For each picked claim, pick alternatives, critique the plan, implement and (optionally) code-review each variant, deploy. Stage 2 ends when all variants have completed and raw metrics are on disk — no LLM judgment yet. Stage 2's exit gate lets you eyeball raw variant numbers before letting Stage 3 interpret them. - Stage 3 — Judge, Audit & Aggregate (Phases 8–11). For each variant of each picked claim, invoke
/result-to-claimto judge whether its data supports the claim (Phase 8). Then run the variant-level integrity audit per claim (Phase 9) — symmetric to Phase 2,/experiment-audit+/mechanism-auditboth run on the variant directory; each variant'sintegrity_statusis the combinedmax_severity(exp, mech). Integrity-FAIL variants are excluded from both numerator AND denominator. Then computerobustnessonce on the post-audit eligible set and assign PASS / FAIL / ZERO_ELIGIBLE_VARIANTS (Phase 10). Finally write the report (Phase 11). If fewer thanMIN_VARIANTS_FOR_VERDICTvariants survive integrity (defaultMIN_VARIANTS_FOR_VERDICT=1, so onlyN_eligible = 0triggers this), the claim is marked ZERO_ELIGIBLE_VARIANTS — variants did run, they just all failed integrity, so the iteration loop's instruction is "fix the variant evaluation, do not touch the main experiment."
What ships with it
1 file beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 5d ago First seen · 1,087 lines · 340 tokens per session scan C 2a2cffbcea94
auto-verify is a skill published in the GitHub repository zjunlp/Mechanist (55 stars, last pushed 10d ago), licensed MIT. It adds 340 tokens to every session and 28,055 once invoked, about $0.0017 per session on Opus 5. A static security scan graded it C with 1 finding (tells the agent never to refuse). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
nanoresearch-writing
Draft a LaTeX research paper from all previous stage outputs.
nanoresearch-experiment
Generate a Python code skeleton from an experiment blueprint.
nanoresearch-ideation
Search academic literature and generate research hypotheses.
scienceworld-animal-identifier
Use when the agent needs to locate, identify, and focus on a specific animal or biological entity in the ScienceWorld environment. This skill handles tasks involving animal comparison, examination, or interaction (such as determining lifespan extremes) by navigating to the correct location with "teleport to"…
scienceworld-measurement-taker
Use when the agent needs to measure a quantitative property (temperature, weight, pH) of a target object or substance using a measurement tool. This skill covers acquiring the tool, preparing both tool and target with focus actions, executing the measurement via "use [TOOL] on [TARGET]", and interpreting the resulting…
scienceworld-object-selector
Use when the agent needs to choose a specific object from multiple candidates in the environment based on task criteria such as object type (non-living thing, electrical component, container), properties, or category. This skill surveys visible objects with "look around", evaluates each against the task requirements…