skill
novera-skills
Trust layer for AI agents - deterministic, offline Agent Skills (open Agent Skills standard, stdlib-only, cross-client)
Set up
Skills are installed by placing their folder where your agent loads skills.
The download comes from github.com/whaojie797-design/novera-skills itself, not from our server, so what you get is exactly what its author published.
Install instructions come from the README
README
synced Nov 1, 2026Novera Skills — Trust layer for AI agents
Deterministic, offline Agent Skills for auditing the trustworthiness of AI-produced content and claims. Built on the open Agent Skills standard (SKILL.md + agents/openai.yaml), compatible across clients, zero third-party dependencies, pure Python standard library.
Status: early and small on purpose. Five skills are released; more are on a public roadmap. Code over claims.
What is this
Each skill in this repository audits one class of claims that AI-generated assets tend to assert — from geographic claims and directory materials to skill packages and e-commerce briefs. Everything runs offline with deterministic scripts: same input, byte-identical report. Findings always carry file:line locations, and every judgment that depends on external facts is labeled with an evidence strength instead of being asserted.
Skills
| Skill | Status | One-liner |
|---|---|---|
skills/geo-evidence-audit | v0.1.0 released | Audits geographic claims in text assets for internal consistency: phone country codes vs claimed cities, timezones, currencies, coordinates vs country bounding boxes, hreflang tags, map embeds — and labels every claim with an evidence strength (explicit / inferred / unverified). |
skills/ai-tool-directory-publisher | v0.1.0 released | Prepares and audits AI tool directory submissions: validates listing materials against per-directory requirement snapshots (Futurepedia, Toolify, There's An AI For That, and more), finds drift between the same tool's listings across directories, and tracks submission status. Does NOT auto-submit, does NOT crawl, does NOT guarantee acceptance. |
skills/skill-eval-harness | v0.1.0 released | Evaluates any Agent Skill package against a deterministic quality baseline: frontmatter discipline, line budget, trigger inventory, scripts free of third-party imports and network/spawn calls via AST analysis, fixtures contract, structural integrity. Static, offline, pass/fail per check — no scoring; never executes the evaluated skill. |
skills/skill-supply-chain-audit | v0.1.0 released | Source-side supply-chain profiling for third-party skills before you install them: repository health (activity, releases, archived/stale states), reference surface (insecure HTTP links, raw IPs, suspicious lookalike names), distribution risks (curl-pipe-shell installers, unofficial registries). Complements skill-sentry, which audits skills at runtime locally. |
skills/commerce-visual-brief | v0.1.0 released | Validates e-commerce visual briefs (photo/design requirement sheets) before they go to a shoot or design team: required fields, price/locale consistency, claim-to-image evidence, category-scene conflicts, and declared image specs against platform snapshots (verified official page for Amazon; unverified platform entries are skipped by default and never filled with fabricated numbers) — plus extreme-word compliance risk hints, each carrying an explicit "risk hint, not a legal determination" disclaimer. |
Roadmap
| # | Slug | Status | Scope |
|---|---|---|---|
| 1 | geo-evidence-audit | released (v0.1.0) | Geo-claim consistency audit |
| 2 | ai-tool-directory-publisher | released (v0.1.0) | Directory-submission materials, cross-directory consistency, submission status |
| 3 | skill-eval-harness | released (v0.1.0) | Deterministic quality evaluation of Agent Skill packages |
| 4 | skill-supply-chain-audit | released (v0.1.0) | Source-side supply-chain profiling for third-party skills (repository health, reference surface, distribution risks) — complements skill-sentry, which audits skills at runtime locally |
| 5 | commerce-visual-brief | released (v0.1.0) | E-commerce visual brief validation: completeness, consistency, platform image specs, extreme-word risk hints |
| 6–10 | to be defined | planned | Names and scope not yet fixed |
Quick start (geo-evidence-audit)
No installation. Python 3.9+ required, nothing else.
# Text report
python skills/geo-evidence-audit/scripts/audit.py path/to/page-or-dir
# JSON report
python skills/geo-evidence-audit/scripts/audit.py path/to/page-or-dir --format json
# Only contradictions, drop unverified claims
python skills/geo-evidence-audit/scripts/audit.py path/to/page.md --min-strength explicit
Exit codes: 0 no findings · 1 findings present (contradictions or unverified claims) · 2 usage or input error.
As an Agent Skill, point your client at skills/geo-evidence-audit/ — SKILL.md carries the trigger conditions, agents/openai.yaml the cross-client description.
Repository layout
novera-skills/
├── skills/<slug>/ # one self-contained skill per directory:
│ ├── SKILL.md # triggers, workflow, boundaries (frontmatter: name + description only)
│ ├── agents/openai.yaml
│ ├── scripts/ # deterministic stdlib-only tooling, entry audit.py
│ ├── references/ # data provenance (URL + retrieval date + evidence strength), rules, evidence model, scope
│ └── fixtures/ # audit test fixtures with expected exit codes
├── tests/<slug>/ # pytest suite driving the real CLI
├── tools/py39_gate.py # CI syntax gate (ast feature_version=(3,9))
└── docs/ # internal design docs (Chinese, not part of any release)
Skills directories intentionally contain no README, install guide, or changelog — everything consumer-facing lives here.
Per-skill publishing
Each skill is versioned and released independently with a namespaced tag:
<slug>-v<semver> e.g. geo-evidence-audit-v0.1.0
MAJOR = breaking change to triggers / CLI / output schema · MINOR = new signals, rules, or report fields · PATCH = false-positive/negative fixes, docs, fixtures. Bare v* tags and floating latest are never used. To consume a single skill, fetch the tag and take its skills/<slug>/ directory.
Constraints
- Pure Python standard library, zero third-party dependencies, Python 3.9+ (CI-enforced syntax gate)
- Fully offline: audit scripts never make network requests
- Deterministic: same input produces byte-identical output
- Findings always carry
file:line; evidence strength is labeled, not asserted - No performance claims anywhere: numbers only after they are measured
- CI gates: py39 syntax, stdlib-only import scan, SKILL.md < 500 lines, full pytest matrix (ubuntu/windows × 3.9/3.12)
License
Novera Skills — AI 智能体的信任层
确定性的、完全离线的 Agent Skills,用于审计 AI 产出内容与声称的可信度。基于开放 Agent Skills 标准(SKILL.md + agents/openai.yaml),跨客户端兼容,零第三方依赖,纯 Python 标准库实现。
状态:刻意保持早期与小体量。已发布五款,更多在公开路线图上。代码先于声称。
这是什么
本仓库的每款 skill 审计一类 AI 生成资产容易出错作假的声称——从地理声称、目录站材料到 skill 包与电商 brief。全部检测由离线的确定性脚本完成:相同输入,逐字节相同的报告。每条 finding 必带 file:line 定位;任何依赖外部事实的判断都标注证据强度,而不是直接断言。
技能列表
| 技能 | 状态 | 一句话说明 |
|---|---|---|
skills/geo-evidence-audit | v0.1.0 已发布 | 审计文本资产中地理声称的内部一致性:电话区号与声称城市、时区、货币、坐标与国家外包框、hreflang 标记、地图嵌入的交叉核对,并为每条声称标注证据强度(explicit / inferred / unverified)。 |
skills/ai-tool-directory-publisher | v0.1.0 已发布 | 为 AI 工具目录站准备与审计提交材料:按各站字段要求快照(Futurepedia、Toolify、There's An AI For That 等)校验 listing 材料、发现同一工具跨目录信息漂移、维护提交状态表。不自动提交、不爬站、不承诺收录。 |
skills/skill-eval-harness | v0.1.0 已发布 | 对任意 Agent Skill 包做确定性质量评估:frontmatter 纪律、行数预算、触发清单、脚本无第三方依赖与网络/进程调用(AST 分析)、夹具契约、结构完整性。静态离线、逐项 pass/fail——无评分,绝不执行被评估的 skill。 |
skills/skill-supply-chain-audit | v0.1.0 已发布 | 第三方 skill 安装前的来源侧供应链画像:仓库健康度(活跃度、发布、归档/停滞状态)、引用面(不安全 HTTP 链接、裸 IP、可疑仿冒名)、分发风险(curl 管道执行安装器、非官方源)——与 skill-sentry(本地运行时审计)互补。 |
skills/commerce-visual-brief | v0.1.0 已发布 | 在拍摄/设计需求单发出前做确定性校验:必填字段、价格与币种/locale 一致性、卖点声称与佐证图位、品类×场景冲突、图片规格声明对照平台快照(amazon 官方页核实;未核实平台条目默认跳过、绝不编造数字),并输出附"风险提示而非法律定性"免责声明的极限词检查。 |
路线图
| # | Slug | 状态 | 范围 |
|---|---|---|---|
| 1 | geo-evidence-audit | 已发布(v0.1.0) | 地理声称一致性审计 |
| 2 | ai-tool-directory-publisher | 已发布(v0.1.0) | 目录站提交材料、跨目录一致性、提交状态 |
| 3 | skill-eval-harness | 已发布(v0.1.0) | Agent Skill 包的确定性质量评估 |
| 4 | skill-supply-chain-audit | 已发布(v0.1.0) | 第三方 skill 的来源侧供应链画像(仓库健康度、引用面、分发链路风险)——与 skill-sentry(本地运行时审计)互补 |
| 5 | commerce-visual-brief | 已发布(v0.1.0) | 电商视觉 brief 校验:完整性、一致性、平台图片规格、极限词风险提示 |
| 6–10 | 待定 | 规划中 | 名称与范围尚未确定 |
快速开始(geo-evidence-audit)
无需安装。仅需 Python 3.9+。
# 文本报告
python skills/geo-evidence-audit/scripts/audit.py path/to/page-or-dir
# JSON 报告
python skills/geo-evidence-audit/scripts/audit.py path/to/page-or-dir --format json
# 只要矛盾类 finding,过滤 unverified 声称
python skills/geo-evidence-audit/scripts/audit.py path/to/page.md --min-strength explicit
退出码:0 无 finding · 1 有 finding(矛盾或 unverified 声称)· 2 用法或输入错误。
作为 Agent Skill 使用时,将客户端指向 skills/geo-evidence-audit/——SKILL.md 载明触发条件,agents/openai.yaml 提供跨客户端描述。
仓库布局
novera-skills/
├── skills/<slug>/ # 每款 skill 自成一体的目录:
│ ├── SKILL.md # 触发条件、工作流、边界(frontmatter 仅 name + description)
│ ├── agents/openai.yaml
│ ├── scripts/ # 确定性纯标准库工具,入口 audit.py
│ ├── references/ # 数据来源(URL + 抓取日期 + 证据强度)、规则、证据模型、分工
│ └── fixtures/ # 审计测试夹具与预期退出码
├── tests/<slug>/ # 驱动真实 CLI 的 pytest 套件
├── tools/py39_gate.py # CI 语法门禁(ast feature_version=(3,9))
└── docs/ # 内部设计文档(中文,不进任何发布物)
skill 目录内刻意不放 README、安装指南、变更日志——面向使用者的信息全部在本文件。
按目录发布
每款 skill 独立版本化,用带 slug 前缀的 tag 发布:
<slug>-v<semver> 如 geo-evidence-audit-v0.1.0
MAJOR = 触发语义 / CLI / 输出结构破坏性变更 · MINOR = 新增信号、规则或报告字段 · PATCH = 误报漏报修复、文档、夹具。永不使用裸 v* tag 和浮动 latest。只需单个 skill 时,取对应 tag 下的 skills/<slug>/ 目录即可。
工程约束
- 纯 Python 标准库,零第三方依赖,Python 3.9+(CI 语法门禁强制)
- 完全离线:审计脚本绝不发起网络请求
- 确定性:相同输入产生逐字节相同的输出
- finding 必带
file:line;证据强度只标注、不断言 - 任何地方不做性能声明:实测之后才写数字
- CI 门禁:py39 语法、纯标准库 import 扫描、SKILL.md < 500 行、全量 pytest 矩阵(ubuntu/windows × 3.9/3.12)