tdg-personal/eval-harness
Formal evaluation framework for Claude Code sessions implementing eval-driven development (EDD) principles
31
39%
Does it follow best practices?
Run evals on this skill
Adds up to 20 points to the overall score
View guide
Medium
Suggest reviewing before use
Security
1 medium severity finding. This skill can be installed but you should review these findings before use.
W013: Attempt to modify system services in skill instructions.
What this means
The skill prompts the agent to compromise the security or integrity of the user’s machine by modifying system-level services or configurations, such as obtaining elevated privileges, altering startup scripts, or changing system-wide settings.
Why it was flagged
The prompt explicitly includes a capability eval "Can create new user account," which could direct an agent to create system-level users or otherwise modify machine state, so it poses a non-trivial risk though most other instructions are project-level eval mechanics and non-privileged.
- Audited
- Security analysis