← 返回
未分类 中文

skill-usefulness-audit

Audit installed agent-skill packages for cleanup using usage, overlap, burden, risk, and optional ablation/community evidence. Trigger only on explicit reque...
对已安装的代理-技能包进行审计清理,使用使用率、重叠、负担、风险以及可选的消融/社区证据。仅在明确请求时触发。
gongyu0918-debug
未分类 clawhub v0.3.0 8 版本 100000 Key: 无需
★ 67
Stars
📥 1,213
下载
💾 0
安装
8
版本
#audit#latest#latest audit skills#latest audit skills openclaw#latest audit skills openclaw hermes claude-code#openclaw#skills

概述

Skill Usefulness Audit

ClawHub / OpenClaw Edition

This ClawHub bundle is packaged for OpenClaw. Install it from an OpenClaw workspace with:

openclaw skills install skill-usefulness-audit

OpenClaw picks up installed workspace skills in the next session. For other agent hosts, use the GitHub repository instead: https://github.com/gongyu0918-debug/skill-usefulness-audit

本 ClawHub 包是 OpenClaw 专用发布包。其他 agent 版本请访问 GitHub 仓库:https://github.com/gongyu0918-debug/skill-usefulness-audit

Overview

Use this skill to judge whether installed skills still deserve to stay installed.

It turns vague "this feels useless" opinions into a repeatable audit based on usage evidence, overlap, outcome impact, quality burden, confidence, community prior, and static risk hints.

Manual Trigger Only

Run this skill only after a direct user request.

Do not invoke it implicitly during normal task execution.

Do not use it for general code review, general security audit, employee skill assessment, or normal task execution.

Safety

Never delete or quarantine skills automatically.

Treat all delete, merge-delete, and quarantine-review results as manual-review recommendations.

Do not delete skills based only on a structure-only report.

This tool does not automatically replay historical conversations; it generates ablation plans and reads ablation result files that the user provides.

Audit Scope

Audit these layers in order:

  1. Usage evidence with recency and source quality.
  2. Installed skill metadata and instructions.
  3. Functional overlap across skills.
  4. Ablation impact from user-provided skill-on versus skill-off results for non-API and non-tool skills.
  5. Quality burden from over-triggering, context-heavy resources, weak progressive disclosure, redundant references/assets, weak scripts, or private-looking bundled files.
  6. Static health and risk signals.
  7. Optional offline community or registry metrics.

Treat API and tool skills as protected capability skills during ablation.

Examples: Excel, DOCX, PDF, browser automation, deployment, OCR, external API wrappers, MCP/API gateway helpers.

Workflow

  1. Collect installed skills.

Search user-provided roots first.

Fallback to OpenClaw-local roots such as ./skills, ./.agents/skills, ~/.openclaw/skills, or ~/.agents/skills.

  1. Collect usage evidence.

Prefer native counters, logs, or telemetry.

Read calls, recent_30d_calls, recent_90d_calls, last_used_at, and active_days when present.

Also read optional burden fields: executions, script_failures, repair_turns, reference_loads, and false_triggers.

Fallback to transcript mentions only when native counts are unavailable.

  1. Read every installed SKILL.md.

Extract name, description, headings, scripts, references, assets, resource size metrics, and source path.

  1. Classify each skill.

Use api, tool, or general.

Use the protected path for api and tool.

  1. Detect overlap.

Compare descriptions, headings, and resource names.

Keep the top overlap peer and similarity score for each skill.

  1. Generate a cost-efficient ablation plan for general skills.

Start with local triage signals instead of full replay.

Prioritize low final score, high overlap, high quality burden, frequent activation, weak evidence, and missing ablation.

Use --ablation-plan-out to write the candidate list, pairwise judge protocol, configurable early-stop rules, model-cost estimates, and accuracy tradeoff.

Run actual replay only for candidates selected by that plan.

  1. Score quality burden.

Penalize over-triggering with low execution or low ablation impact.

Penalize bloated SKILL.md, overlong frontmatter descriptions, excessive reference loading, hidden reference files, vague resource names, long references without a table of contents, reference/assets dumps, executable assets, script count bloat, script maintenance smells, script failure, script syntax errors, and repeated agent repair.

  1. Scan static risk and health signals.

Record shell, network, install-hook, packaging, protected-path, persistence, dynamic-exec, or private-content patterns as static hints, not as a safety proof.

  1. Load optional community metrics.

Accept local registry exports through --community-file.

Treat these metrics as external prior, not local proof.

  1. Score every skill on a 10-point local scale and subtract quality burden for final_score.

Read references/scoring-rubric.md.

  1. Produce the final report as tables.

Include a full ranking table, a recommended-actions table, a delete-candidate table, and a short evidence note for each skill.

Include report_mode, score_breakdown, quality_penalty, quality_evidence, and community_breakdown in JSON output.

Ablation Rules

Read references/ablation-protocol.md before running ablation.

This tool does not automatically replay historical conversations.

It creates an ablation plan and reads normalized ablation result files provided by the user.

For each eligible skill:

  • Generate the ablation plan first.
  • Sample historical tasks only for candidate skills in that plan.
  • Keep the prompt and artifacts identical between the skill-on and skill-off runs.
  • Judge pass/fail, quality delta, tool efficiency, and whether the final answer materially changed.
  • Mark high consistency between skill-on and skill-off runs as evidence that the skill contributes little.

Do not ablate api or tool skills through fake no-tool simulations.

Use the protected-capability branch in the rubric for those skills.

Commands

Run the audit script after collecting evidence:

python scripts/skill_usefulness_audit.py audit \
  --skills-root ./skills \
  --usage-file ./usage.json \
  --history-file ./history.jsonl \
  --ablation-file ./ablation.json \
  --community-file ./community.json \
  --markdown-out ./skill-audit-report.md \
  --json-out ./skill-audit-report.json \
  --ablation-plan-out ./skill-ablation-plan.json

When the host exposes the skill directory, prefer an absolute script path.

Input contracts:

  • --usage-file: JSON, JSONL, CSV, or TSV with per-skill usage evidence.
  • --history-file: raw transcript export used only when direct usage counts are weak or missing. Mentions become history_mentions / suspected_invocations, not direct calls.
  • --ablation-file: normalized JSON or JSONL with skill-on versus skill-off case results.
  • --community-file: optional offline JSON, JSONL, CSV, or TSV registry metrics.
  • --ablation-plan-out: optional JSON plan that estimates model cost and narrows ablation to high-value candidates.
  • --ablation-baseline-cases, --ablation-initial-cases, --ablation-expand-cases, --ablation-max-cases: optional case-count overrides for the ablation plan.

Run without extra files only when you need a structure-only audit.

Usage, community, and ablation evidence become lower-confidence in that mode.

Do not delete skills based only on a structure-only report.

History and usage files may contain sensitive conversations, local paths, project names, and customer data.

Missing env means not configured in the current audit process, not proof that the skill is broken in every host.

Output Contract

Always return these tables:

  1. Full score table with:

rank, skill, source, kind, calls, recent_30d, usage, uniqueness, impact, community, confidence, risk, local, burden, final, verdict, action, basis

  1. Recommended actions with:

skill, local, burden, final, confidence, risk, action, advice

  1. Deletion or merge candidates with:

skill, local, burden, final, kind, action, trigger, advice

  1. Missing-evidence table when usage, ablation, or optional community data is incomplete.
  2. Quality-burden table when a skill has context, asset, reference, script, or over-triggering burden.

Always include these JSON fields:

  • report_mode: strong-evidence, partial-evidence, or structure-only.
  • score_breakdown: per-skill usage, uniqueness, impact, community, static risk, quality, and confidence details.
  • quality_penalty: 0.0-2.5 deduction from local_score.
  • quality_penalty_uncapped: raw quality burden before the 2.5 cap.
  • quality_evidence: concrete burden flags and evidence.
  • community_breakdown: registry signal components when community data is present.
  • ablation_plan: cost-efficient plan with candidate skills, model-cost estimates, stop rules, and expected accuracy impact.
  • action_advice: plain-language recommendation for the user.
  • risk_review: concise human review guidance for any static risk flags.

Keep deletion advice conservative for system or host-core skills.

Recommend narrowing or merging before deletion when two high-overlap skills still serve distinct host integrations.

Treat delete, merge-delete, and quarantine-review as manual-review recommendations only; never remove or isolate a skill automatically from this report.

Resources

  • scripts/skill_usefulness_audit.py: compatibility wrapper for the modular audit package.
  • scripts/skill_usefulness_audit_lib/: collect metadata, score skills, scan static risk hints, and render Markdown/JSON tables.
  • references/scoring-rubric.md: 10-point scoring rules, confidence logic, community prior, and action thresholds.
  • references/ablation-protocol.md: normalized replay method for historical conversation tests.

版本历史

共 8 个版本

  • v0.3.0 当前
    2026-06-07 05:34
  • v0.2.17
    2026-06-04 12:42
  • v0.2.15
    2026-06-03 12:37 安全 安全
  • v0.2.13
    2026-05-25 16:25 安全 安全
  • v0.2.12
    2026-05-23 15:50 安全 安全
  • v0.2.10
    2026-05-09 16:14 安全 安全
  • v0.2.9
    2026-05-03 04:15 安全 安全
  • v0.2.7
    2026-05-01 16:26 安全 安全

安全检测

腾讯云安全 (Keen)

队列中

腾讯云安全 (Sanbu)

队列中

🔗 相关推荐

中文公文写作

gongyu0918-debug
用于起草、改写和复核中文公文及正式工作材料;当用户要求通知、请示、报告、函、复函、批复、意见、决定、决议、议案、公报、命令、公告、通告、公示、通报、纪要、方案、说明、申请、征求意见函、采购公告、可研、调研、总结、工作要点、审查材料、讲话稿、
★ 0 📥 1,861

情绪.skill / Emotion Skill

gongyu0918-debug
压力下编码智能体的正向路由策略。适用于仓库调试、范围实现、重复失败恢复、证据审查、谨慎场景等。
★ 0 📥 702

Find Community Help

gongyu0918-debug
构建安全的外部帮助方案,以应对受阻的代理工作。仅在任务停滞、循环、版本敏感或可能涉及已知问题时使用。
★ 0 📥 206