Security

ML Research Skeptical Audit

Try it

Challenge ML claims with code and falsification

What it does

Adversarial, code-cited audit of ML research claims, objectives, leakage, controls, and baseline fairness with ranked risks and explicit falsification tests. Use when asked to challenge a result or assess whether an experimental comparison is trustworthy.

The skill document

ML research skeptical audit

Structure a scientific argument grounded in the actual implementation. This is a review method, not an experiment runner: reviewing code does not reproduce a figure, execute training, establish statistical significance, or prove a scientific claim.

Ground rules

  1. Code or it is unverified. Cite every structural repository claim to a file, symbol, and line range at the inspected revision. Quote short decisive snippets when useful. If the implementation is unavailable, label the claim unverified; do not invent APIs or infer code behavior from names alone.
  2. Separate units and objectives. Latent-space MSE, token cross-entropy, and contrastive losses cannot be ranked numerically against each other. Require a shared downstream task/metric with matched data and evaluation protocol before claiming superiority.
  3. Use three verdicts. Solid: implementation matches the stated intent. Design choice: defensible but sensitive to a named lever such as masking, balancing, tie-breaking, or initialization. Questionable: possibly incorrect, unfair, or misleading, paired with a discriminating counterexample or falsification. “Solid” is not a claim that the method works empirically.
  4. Rank validity risks before presentation concerns: leakage and evaluation contamination; incompatible units and unfair controls; train/eval disparity; optimization and regularization; then cosmetic issues. Explain severity and evidence rather than forcing every issue into this order.
  5. End with what would prove the audit wrong. Prefer a runnable check grounded in existing scripts; label proposed scripts and unexecuted commands as such.

Scope and trace

State the exact claim, scope (data/model/loss/training/evaluation/fairness), inspected revision, worktree caveat, and available evidence. Read repository instructions and experiment documentation. Locate the config and entry point for the specific result, not merely the current defaults. Separate executed evidence from logs provided by others and from static inference.

Trace one concrete forward pass: batch dimensions → transformations → model predictions → loss terms and reductions → optimized parameters. Mark unknown dimensions rather than inventing them. Then inspect:

  1. Data contract: dataset/collate schema, split construction, sampling, augmentation, preprocessing fits, duplicate/entity/time overlap, label-derived features, retrieval contamination, and whether validation/test data affect training or checkpoint choice.
  2. Model: forward signature, predicted versus reconstructed targets, target visibility, capacity, conditioning, masking, and possible shortcut solutions. For generative or representation-prediction methods, consider intrinsic data complexity versus model capacity without asserting an unmeasured dimension.
  3. Objective: weights, units, normalization/reduction, masking, modality/task balancing, collapse prevention, stop-gradient, and targets. Check that the implemented optimization matches the claim.
  4. Optimization: optimizer/schedules, initialization, EMA timing, gradient accumulation, mixed precision, update ordering, effective batch and token budgets, and failed/diverged runs.
  5. Evaluation: exact checkpoint selection, held-out protocol, metric units/direction/aggregation, shared task, preprocessing, inference budget, paired seeds/examples, uncertainty and multiple comparisons. Inspect the code path producing the figure, not just training metrics.
  6. Reproducibility: entry point, resolved config, code/data versions, seed handling, hardware/precision, output lineage, and unavailable artifacts. A seed alone is not reproducibility.

Controls and falsification

Choose tests that distinguish the disputed explanation from alternatives. Do not demand expensive experiments merely to fill a checklist; first use static checks and small counterexamples when sufficient.

ClaimDiscriminating check
A beats B on training lossIdentify units; if incompatible, compare on a shared held-out downstream metric, fixed selection rule, and evaluation budget.
Fair comparisonMatch or explicitly account for data, steps/tokens, parameters, tuning effort, and measured compute; include extra encoders, targets, projectors, and inference cost. State which budget is controlled rather than claiming all are equivalent.
Scaling lawVary size with controlled data/compute and regularizer conventions; check optimization failures, uncertainty, and extrapolation limits.
Multitask mechanism helpsAblate terms or task dropout, include simpler baselines, and use paired seeds with uncertainty.
No leakageTrace split/preprocessing/checkpoint-selection code; check overlap at the meaningful entity/time unit and test-set reuse.
Representation is meaningfulCompare shortcut/collapse or shuffled-label controls, fixed probes, and transfer under a declared evaluation protocol.

For each proposed falsification specify hypothesis, intervention, held-fixed variables, metric, decision criterion, expected discriminating outcome, and estimated resource/permission needs. Do not run training, download restricted data, launch paid compute, or mutate experiment tracking unless separately authorized. Avoid post-hoc threshold invention: state when a criterion is provisional.

Deliverable

Give the question and evidence limits; one concrete forward/loss trace with citations; Solid / Design choice / Questionable findings; ranked risks with claim impact; and a short falsification list. Cite both supporting and conflicting evidence. Distinguish “reviewed,” “executed,” “reproduced,” and “not checked.” A missing control is a limitation, not proof of misconduct or a failed method.

Related skills

Audit an LLM evaluation or benchmark repo for integrity and credibility practices. Use when asked to "audit my benchmark," "is my eval trustworthy," "check my leaderboard for contamination," "review this benchmark's methodology," or "what would a reviewer attack in my eval." Greps the target repo for evidence across seven dimensions (pre-registration, contamination, holdout hygiene, judge validity, statistical honesty, reproducibility, leaderboard exclusions) and emits a scored report with file:line evidence, severity, and concrete fixes.

1 installs

Audit installed AI agent skills against the OWASP Agentic Skills Top 10 and emit text, JSON, SARIF, or HTML reports.

29 installs1 stars

Audit whether AI agents can actually use your product — docs, APIs, onboarding, errors, and discoverability, evaluated from a non-human user's perspective. U...

Security and compliance auditing tool for AI agents. Scans code for vulnerabilities, checks GDPR/CCPA compliance, generates risk reports with remediation guidance.

Audit a principal AI agent or coordinator bot: review memory, learnings, recent errors, installed skills, operational risks, delegation posture, and propose...

9 installs

Design or audit self-describing ML run metadata attached at initialization, including intent, code and data identity, resume lineage, and evidence limits. Use when wiring a tracker, introducing a run naming pattern, or investigating why a run exists.

1 installs