Token导航 LogoToken导航TokenDH.com
研究检索只读github未标认证来源可访问许可证需确认审计通过

rag-auditorRAG auditor 搜索

Agent Skill

用于辅助安全审计、权限检查、凭据风险、认证流程和常见漏洞排查。它适合让 Agent 梳理敏感配置、检查依赖风险、分析鉴权逻辑或生成安全复核清单。使用时不能把工具输出直接当最终结论,涉及密钥、令牌、用户数据或生产系统时,应先确认最小权限、脱敏方式和操作边界。

总安装

367

周安装

15

GitHub Stars

217

下载量

118
CodexClaudeCursorGemini CLI

安装说明

本站只整理中文说明和来源信息,不托管安装包,也不代用户安装。

GitHub

来源数

2

许可证

unknown

最后核验

2026-05-01

来源状态

来源可访问

安装方式

通过对话安装

复制提示词发给支持本地命令或 Skills 的 AI 助手,先确认命令和权限,再让它执行。

请帮我安装这个 Agent Skill:rag-auditor(RAG auditor 搜索)
来源仓库:https://github.com/mathews-tom/praxis-skills
仓库路径:skills/rag-auditor
安装命令:
npx skills add https://github.com/mathews-tom/praxis-skills --skill rag-auditor
安装前请先检查当前环境是否支持对应 CLI,并向我确认将要执行的命令、安装目录、联网范围和文件读写权限;确认后再执行。

命令行安装

复制命令到本机终端执行。该命令会通过 npx skills 从第三方来源获取 Skill;本站只展示命令,不托管安装包,也不自动执行。

skills.shnpx skills
npx skills add https://github.com/mathews-tom/praxis-skills --skill rag-auditor

简介

用于辅助安全审计、权限检查和常见漏洞排查,帮助梳理敏感配置和鉴权逻辑。

  • 适合让 Agent 检查依赖风险、生成安全复核清单或分析认证流程。
  • 通过 GitHub 安装,使用 npx skills add 命令添加指定仓库的技能。
  • 不能将工具输出直接当作最终结论,涉及密钥或生产系统时应确认最小权限和操作边界。
  • rag-auditor 属于研究检索类 Skill,可作为该场景下的辅助能力补充。

SKILL.md

RAG Auditor

Systematic RAG pipeline evaluation across the full retrieval-generation chain: designs evaluation query sets, measures retrieval metrics (Precision@K, Recall@K, MRR), evaluates generation quality (groundedness, completeness, hallucination rate), diagnoses component-level failures, and recommends targeted improvements.

Reference Files

FileContentsLoad When
references/retrieval-metrics.mdPrecision@K, Recall@K, MRR, NDCG definitions and calculationAlways
references/generation-metrics.mdGroundedness, completeness, hallucination detection methodsGeneration evaluation needed
references/failure-taxonomy.mdRAG failure categories: retrieval, generation, chunking, embeddingFailure diagnosis needed
references/diagnostic-queries.mdDesigning evaluation query sets, known-answer questions, difficulty levelsEvaluation setup

Prerequisites

  • Access to the RAG pipeline (or its outputs for post-hoc evaluation)
  • A set of test queries with known-correct answers
  • Understanding of the pipeline components (embedding model, retriever, generator)

Workflow

Phase 1: Pipeline Inventory

Document the RAG pipeline configuration:

  1. Document source — What documents are indexed? Format, count, size.
  2. Chunking — Strategy (fixed-size, semantic, paragraph), chunk size, overlap.
  3. Embedding — Model name and version, dimensionality.
  4. Vector store — Type (FAISS, Pinecone, Chroma, pgvector), index type.
  5. Retrieval — Method (similarity, hybrid, reranking), top-K parameter.
  6. Generation — Model, prompt template, context window usage.

Phase 2: Design Evaluation Queries

Create a diverse set of test queries:

Query TypePurposeCount
Known-answer (factoid)Measure retrieval + generation accuracy10+
Multi-hopRequire combining info from multiple chunks5+
UnanswerableNot in the corpus — should abstain3+
AmbiguousMultiple valid interpretations3+
Recent/updatedTest freshness2+

For each query, document the expected answer and the source chunk(s).

Phase 3: Evaluate Retrieval

For each test query, measure:

  1. Precision@K — Of the K retrieved chunks, how many are relevant?
  2. Recall@K — Of all relevant chunks in the corpus, how many were retrieved?
  3. MRR (Mean Reciprocal Rank) — How high is the first relevant chunk ranked?
  4. Chunk relevance — Score each retrieved chunk: Relevant, Partially Relevant, Irrelevant.

Phase 4: Evaluate Generation

For each test query with retrieved context:

  1. Groundedness — Is every claim in the response supported by the retrieved context? Score: 0 (hallucinated) to 1 (fully grounded).
  2. Completeness — Does the response use all relevant information from the context? Score: 0 (ignored context) to 1 (complete).
  3. Hallucination detection — Identify specific claims not supported by context.
  4. Abstention — For unanswerable queries, does the model correctly say "I don't know"?

Phase 5: Diagnose Failures

For every incorrect or low-quality response, classify the root cause:

Failure TypeDiagnosisIndicator
Retrieval failureRelevant chunks not retrievedLow Recall@K
Ranking failureRelevant chunk retrieved but ranked lowLow MRR, high Recall
Chunk boundary issueAnswer split across chunk boundariesPartial matches in multiple chunks
Embedding mismatchQuery semantics don't match chunk embeddingsRelevant chunk has low similarity score
Generation failureCorrect context but wrong answerHigh retrieval scores, low groundedness
HallucinationModel invents facts not in contextClaims not traceable to any chunk
Over-abstentionModel refuses to answer when context is sufficientUnanswered with relevant context present

Phase 6: Recommendations

Based on failure analysis, recommend specific improvements:

Failure PatternRecommendation
Chunk boundary issuesIncrease overlap, try semantic chunking
Low Precision@KReduce K, add reranking stage
Low Recall@KIncrease K, try hybrid search
Embedding mismatchTry different embedding model, add query expansion
HallucinationStrengthen grounding instruction in prompt, reduce temperature
Over-abstentionSoften abstention criteria in prompt

Output Format

## RAG Audit Report

### Pipeline Configuration
| Component | Value |
|-----------|-------|
| Documents | {N} ({format}) |
| Chunking | {strategy}, {size} tokens, {overlap}% overlap |
| Embedding | {model} ({dimensions}d) |
| Retrieval | {method}, K={N} |
| Generation | {model}, temperature={T} |

### Evaluation Dataset
- **Total queries:** {N}
- **Known-answer:** {N}
- **Multi-hop:** {N}
- **Unanswerable:** {N}

### Retrieval Quality

| Metric | Score | Target | Status |
|--------|-------|--------|--------|
| Precision@{K} | {score} | {target} | {Pass/Fail} |
| Recall@{K} | {score} | {target} | {Pass/Fail} |
| MRR | {score} | {target} | {Pass/Fail} |

### Generation Quality

| Metric | Score | Target | Status |
|--------|-------|--------|--------|
| Groundedness | {score} | {target} | {Pass/Fail} |
| Completeness | {score} | {target} | {Pass/Fail} |
| Hallucination rate | {score} | {target} | {Pass/Fail} |
| Abstention accuracy | {score} | {target} | {Pass/Fail} |

### Failure Analysis

| # | Query | Failure Type | Root Cause | Recommendation |
|---|-------|-------------|------------|----------------|
| 1 | {query} | {type} | {cause} | {fix} |

### Recommendations (Priority Order)
1. **{Recommendation}** — addresses {N} failures, expected impact: {description}
2. **{Recommendation}** — addresses {N} failures, expected impact: {description}

### Sample Failures

#### Query: "{query}"
- **Expected:** {answer}
- **Retrieved chunks:** {chunk summaries with relevance scores}
- **Generated:** {response}
- **Issue:** {diagnosis}

Calibration Rules

  1. Component isolation. Evaluate retrieval and generation independently. A great retriever with a bad generator looks like retrieval failure if you only check end output.
  2. Known answers first. Start with factoid questions where the correct answer is unambiguous. Multi-hop and ambiguous queries are harder to evaluate.
  3. Quantify, don't qualify. "Retrieval is bad" is not a finding. "Precision@5 is 0.3 (target: 0.8) with 70% of failures due to chunk boundary splits" is actionable.
  4. Sample failures deeply. Aggregate metrics identify WHERE the problem is. Individual failure analysis identifies WHY.

Error Handling

ProblemResolution
No known-answer queries availableHelp design them from the document corpus. Pick 10 facts and formulate questions.
Pipeline access not availableWork from recorded inputs/outputs. Post-hoc evaluation is possible with query-context-response triples.
Corpus is too large to reviewSample-based evaluation. Select representative documents and generate queries from them.
Multiple failure types co-existAddress retrieval failures first. Generation quality cannot exceed retrieval quality.

When NOT to Audit

Push back if:

  • The pipeline hasn't been built yet — design it first, audit after
  • The corpus has fewer than 10 documents — too small for meaningful retrieval evaluation
  • The user wants to compare embedding models — that's a benchmark task, not an audit

适合场景

01

研究助手

02

事实核查

03

知识库问答

04

带来源的搜索总结

能力概览

能力 1

组合搜索和大模型调用

能力 2

支持多来源检索和总结

能力 3

强调引用来源和事实核查

能力 4

适合研究型 Agent 流程

安装后应在对应宿主中按原始 README 的触发条件使用;具体调用方式请以来源页面和 README 为准。

平台分布

Codex

37.27%
按下载量换算44

Claude

31.58%
按下载量换算37

Cursor

19.16%
按下载量换算23

Gemini CLI

8.46%
按下载量换算10

安全审计

Gen Agent Trust Hub

通过

Socket

通过

Snyk

通过

权限和风险

只读

该 Skill 主要提供规则、说明或参考内容,本身偏只读;真正读写文件、联网或执行命令仍取决于宿主 Agent 的任务。

安装前确认

本站仅展示第三方公开信息,不托管安装包,不提供自动安装或运行环境。安装前应自行审查源码、依赖和命令行为。当前只有一个来源,正式发布前建议补源仓库或其他目录站核验。

来源信息

继续浏览同类 Skills