Caliper: Know if your agent skill actually works
Your skill worked when you tried it. Will it work the next nine times? After the next model update? When another skill competes for the same prompt?
Caliper runs your skill k times inside a real agent (Claude Code, Codex, Pi, or Hermes) and gives you a success rate you can track. It installs the skill the way a user would, so you learn two things separately: did the agent pick your skill, and did the skill do the job.
Then run it again with the skill removed. If the bare agent scores the same, your skill isn't earning its context.
Let your agent run evals for you:
npx skills@latest add edonadei/caliper
Or run them yourself:
pipx install caliper-eval # requires Python 3.10+
# Run the eval: every task, 3 times each.
caliper run commit-writer.eval.yaml --k 3
# Same tasks, skill removed.
caliper run commit-writer.eval.yaml --k 3 --ablate commit-writer
# Did the skill make a difference? (`caliper list commit-writer` shows run IDs.)
caliper compare .caliper/results/commit-writer/<ablated-run>.json .caliper/results/commit-writer/<full-run>.json
caliper compare diffs the two runs task by task. In this illustrative example,
the skill takes both tasks from 33% to 100% and uses 38% fewer tokens than the
bare agent:
Each attempt is one agent session, so a 3-task spec at --k 3 costs 9 sessions,
run 4 at a time by default.
Why Caliper
Agent skills are hard to test. A skill that works on your machine, on this prompt, today, can fail tomorrow after a model update or a one-line edit.
- It tests the skill the way users hit it. Caliper never pastes your skill
into the prompt. It installs it where the agent looks for skills and lets the
agent decide, so a run measures the
description(does it fire?) and the body (does it work?) together. - It tells those two failures apart. Activation gets its own scoreboard,
separate from the success rate. A bad
descriptionand a bad body are fixed in different places, so one blended number would point at neither. - It puts your skill next to its neighbours. Declare the other skills that might compete for a prompt, and assert which one should win.
- It proves the skill is doing the work.
--ablatere-runs the same tasks without it, so you see what the skill adds over the bare agent. - It reports the honest number. Caliper leads with how often a single run
works, not
pass@k, which flatters flaky skills (a 1-in-3 skill scores 70%).
Use Caliper to answer questions like:
- Does my skill still work on the new model?
- Did my edit improve the skill?
- Does my skill fire when it should, and stay quiet when it shouldn't?
- Is the skill worth the context, or would the base agent pass without it?
- Does it still pass the workflows it passed last week?
- Which agent (Claude Code, Codex, Pi, or Hermes) runs this skill more reliably?
Quick start
Path A: Let your agent drive
1. Install the skills
npx skills@latest add edonadei/caliper
This installs two skills: grill-skill
writes evals, and evaluate-skill runs
them. evaluate-skill installs the Caliper CLI for you if it's missing.
2. Generate a spec
In your agent:
/grill-skill ./commit-writer/SKILL.md
grill-skill reads your SKILL.md, interviews you, and writes a 3-task
.eval.yaml (happy path, edge case, adversarial).
3. Run and measure
/evaluate-skill run commit-writer.eval.yaml --k 3
Browse past runs:
/evaluate-skill list
/evaluate-skill report commit-writer
Path B: Run the CLI yourself
1. Install the CLI
pipx install caliper-eval # requires Python 3.10+
2. Write a spec
# commit-writer.eval.yaml
skills:
- ./SKILL.md # the skill under test
- ../changelog-writer/SKILL.md # a neighbour it might steal work from
tasks:
# Autorater: the LLM judge reads the transcript and decides
- name: Writes a conventional commit message
setup: >-
git init -q && git config user.name Eval && git config user.email eval@example.com
&& printf 'retry on 429\n' > NOTES.md && git add NOTES.md
prompt: "Summarize the staged git diff as a commit message."
expect: >
The response is a conventional-commit message: a concise subject
line under 72 characters, followed by a body explaining why the
change was made, not just what changed.
activates: [commit-writer]
# Script execution: a deterministic Python assertion
- name: Keeps the subject line under 72 characters
setup: >-
git init -q && git config user.name Eval && git config user.email eval@example.com
&& printf 'retry on 429\n' > NOTES.md && git add NOTES.md
prompt: "Commit the staged changes."
assert: |
import subprocess
subject = subprocess.run(
["git", "log", "-1", "--pretty=%s"],
capture_output=True, text=True, check=True, # no commit fails here
).stdout.strip()
assert len(subject) <= 72, f"subject line is {len(subject)} chars"
activates: [commit-writer]
# Activation: this prompt belongs to the neighbour, not to you
- name: A release summary belongs to changelog-writer
prompt: "What changed since v2.1? I need it for the release notes."
activates: [changelog-writer]
There are three kinds of check, and a task needs at least one:
expect:is graded by an LLM judge.assert:runs locally as Python.activates:asserts which skills the agent chose to load.
The third task is the one you can't write any other way. Both skills read git
history, so a release-notes request is exactly where commit-writer might grab
work that belongs to changelog-writer. A task like that needs no expect:, so
it skips the judge and costs a fraction of a graded task.
The spec never names an engine. Both the skill and the judge run on
claude-code unless you pick another with --model / --judge-model (see
Choosing an engine).
3. Run it
caliper run commit-writer.eval.yaml --k 3
4. Read the output
Here the skill does its job (83%), but it also takes 2 of 3 release-notes
prompts that belong to changelog-writer. That's a description problem, not a
body problem.
The report ends with a panel for each failed attempt: the output, plus the
assertion or judge reason why. Full results are saved as JSON under
.caliper/results/<spec>/, for you to inspect or caliper compare later.
--verbose adds pass@k and pass^k columns and a panel for every task.
Not sure what to put in a spec?
The Eval Starter Pack has four copy-paste templates, each catching a real agent failure (false success, tool misuse, runaway loops, prompt regressions). Every template runs green as-is against a bundled example, then points at your own skill by editing two or three commented lines.
Recommended workflow
- Create a spec for one behavior you care about.
- Run with
--k 1while iterating on the spec. - Add
assert:for facts an LLM judge might guess wrong (files, JSON, command output). - Move to
--k 3or higher once the task is stable. - Run once with
--ablate <skill>(or--ablate mcp:<server>) andcaliper comparethe two runs, to prove the skill makes a difference. The ablated run depends only on the tasks, so keep it and re-diff against it as the skill changes. - Commit the spec alongside the skill so contributors can run the same eval.
How it works
.eval.yaml spec
│
▼
Harness ──── runs your skill in the agent (Claude Code / Codex / Pi / Hermes)
│
▼
Judge ──── LLM autorater and/or deterministic Python assertions
│
▼
success rate + saved transcript
Each attempt runs in an isolated temporary home with no session history, in a fresh empty working directory. It sees only the MCP servers the spec declares: none of your personal servers, and none of the hosted connectors your Claude or ChatGPT account carries (Gmail, Drive, GitHub, and the like). Results are saved as JSON you can inspect and diff later.
Core concepts
| Term | What it is |
|---|---|
| Spec | A .eval.yaml file that describes the skills and tasks to run |
| Backend | The CLI agent that runs the skill (claude-code, codex, pi, hermes) |
| Judge | What decides pass/fail: an LLM reading the transcript (expect:), Python assertions (assert:), or both |
| Success rate | The primary score: run k times, measure how often a single run works |
| Neighbourhood | The set of skills a spec declares (skills:). All installed, none preloaded, and all assertable. This is the competition your description has to win |
| Activation | The agent choosing to load a skill. Asserted with activates: and scored on its own scoreboard, separate from the success rate |
| Ablation | Re-running the same tasks with a declared skill or mcp: server removed (--ablate), to prove it's doing the work |
| Attempt | One isolated run of a single task (fresh temporary home, no session history) |
The full glossary is in docs/CONTEXT.md.
Agent skills
evaluate-skill: run and manage evals
Create, validate, run, and summarize evals from inside your agent, with no separate terminal. In Claude Code:
/evaluate-skill run commit-writer.eval.yaml --k 3
/evaluate-skill validate commit-writer.eval.yaml
In Codex:
Use the evaluate-skill skill to run commit-writer.eval.yaml with k=3 and summarize the result.
grill-skill: create evals interactively
grill-skill reads your SKILL.md, interviews you about what good behavior
looks like, and writes a 3-task spec. Then it runs the eval and loops: k=1 to
validate, k=3 to measure, and an ablated run to diff against before you commit.
/grill-skill ./commit-writer/SKILL.md
Skip the path if you're already in the skill's directory. If an .eval.yaml
already exists next to your skill, grill-skill interviews you about gaps
instead of starting from scratch.
Choosing an engine
The engine (backend + model) is picked at run time, not in the spec. The spec
describes what is tested and how success is judged; you pick the agent that
runs and grades it when you invoke Caliper. Both default to claude-code:
caliper run my-skill.eval.yaml # claude-code (default)
caliper run my-skill.eval.yaml --model codex # codex, its default model
caliper run my-skill.eval.yaml --model codex:gpt-5.6-sol
caliper run my-skill.eval.yaml --model pi --judge-model claude-code
| Backend | Requires |
|---|---|
claude-code |
Claude Code CLI installed and authenticated |
codex |
Codex CLI (npm install -g @openai/codex), then codex login |
pi |
pi CLI (npm install -g @earendil-works/pi-coding-agent), authenticated |
hermes |
Hermes Agent CLI (Nous Research), authenticated, with a default model set |
The skill engine and judge engine are independent, so you can test a Codex skill with a Claude judge. There's no direct-API backend: to use API billing, configure one of these CLIs with an API key.
Setup details for each backend, the full --model syntax, and MCP support by
backend are in docs/backends.md.
Spec format
The quick start covers the basics. A spec can also:
- pull neighbour skills from a git repo, pinned to a commit
(
skills: - {repo: owner/name, ref: …, path: …}) - give the agent MCP servers, local or remote (
mcp:) - run
setup:andcleanup:shell hooks in each attempt's workdir - extend
PATHor forbid files the agent must not read (sandbox:) - assert silence (
activates: []) or a delegation chain (activates: [mine, helper])
The full format, with every field, is in
docs/spec-reference.md. To scaffold a spec, use
grill-skill or
evaluate-skill.
Upgrading an existing spec?
skill:becameskills:in v0.10. See docs/MIGRATING-to-skills.md.
CLI reference
| Command | Description |
|---|---|
caliper run <spec> |
Run an evaluation spec |
caliper validate <spec> |
Validate a spec file |
caliper list [spec] |
List specs and saved runs. Per spec, each row shows its Run ID and what that run ablated, which is how you find the run to diff against |
caliper report <spec-or-result> |
Re-render saved results |
caliper compare <A> <B> |
Diff two saved runs of the same eval, task by task. Each side is a spec name (that spec's latest run) or a results-JSON path; they must be two distinct runs |
caliper update-cli [backend] |
Check or update installed agent CLI versions |
Results are saved under the nearest .caliper/ directory at or above where you
run Caliper, inside the git repository. See
Where results are saved.
caliper run flags
| Flag | Default | Description |
|---|---|---|
--k INT |
3 |
Attempts per task |
--ablate NAME |
none | Run without this declared skill or mcp: server (repeatable; name every skill for the bare agent). Qualify as skill:/mcp: when both declare the name |
--workers INT |
4 |
Attempts to run in parallel, across all tasks |
--timeout INT |
120 |
Seconds per attempt |
--fail-fast INT |
0 |
Stop a task after N consecutive infra_error/timeout attempts (0 disables; counts attempts, not invocations) |
--model TARGET |
claude-code |
Skill engine: backend, model, or backend:model (syntax) |
--judge-model TARGET |
claude-code |
Judge engine, same syntax |
--verbose |
off | Show per-attempt judge reasoning |
--output PATH |
none | Also save results JSON to a specific path |
Exit codes
| Code | Meaning |
|---|---|
0 |
Ran, and nothing asked for a verdict said no |
1 |
Bad input: spec not found, invalid spec, unresolvable skills, two references naming one run |
2 |
Could not run cleanly: backend misconfiguration, an unavailable model, a retired flag, a failed setup/cleanup hook, or every attempt infra_error/timeout/judge_error |
3 |
Reserved: ran cleanly, but a declared bar was not met |
130 |
Interrupted with Ctrl-C; the partial run was saved |
2 and 3 are the distinction CI needs: the eval could not run is a broken
pipeline, while the skill did not clear the bar is the answer you asked for.
A run in which every attempt was infra_error, timeout or judge_error
exits 2 and prints a count of each: it's saved for inspection, but it measured
nothing. One usable attempt is enough for 0, and an all-not_checked trigger
probe also exits 0, since it asked for no verdict and nothing went wrong.
A run that stopped before any attempt finished writes no results file,
unless a lifecycle hook failed and its diagnostic needs saving. Exits 2 and
130 can therefore leave nothing on disk.
caliper compare deliberately never fails on a regression. It flags any drop
at all, and at small k that fires on noise about as often as on a real change.
Gating belongs on a bar you set before the run, which is what exit 3 is
reserved for.
Scoring
The primary score is the raw success rate: how often a single run works, over the attempts that got a fair shot. Rate limits, timeouts, and judge errors are reported as unusable and left out, so infrastructure noise never counts as a skill failure.
| The question you're asking | Metric | For a 1/3 skill (k=3) |
|---|---|---|
| How reliable is a single run? (default) | success rate | 33% |
| If I retry up to k times and keep any win, do I get one? | pass@k |
70% |
| Will it work on every run, no exceptions? | pass^k |
4% |
pass@k and pass^k appear under --verbose. Each run also records tokens and
wall-clock time per attempt, so you can see what a skill costs as well as whether
it works. Dollar cost isn't tracked, because it's inconsistent across backends.
Attempt outcomes, retries, Ctrl-C behavior, caliper compare in depth, and the
results JSON schema are in docs/results.md.
Troubleshooting
codex judge failed: model ... is not supported
The model isn't available to your Codex account. Use a model that
codex exec --model <name> accepts.
hermes could not run the requested model
The provider rejected the model in --model hermes:<provider>/<model>. Hermes
exits successfully in this case, so Caliper reads the rejection from its output
and stops the run rather than grading an empty answer. Check the model ID with
hermes -z 'Reply OK' --model <model>.
Judge model ... is unavailable / Judge authentication failed / Judge rate limited
The judge CLI reached the provider and the call was refused. Caliper suggests
passing --judge-model <backend[:model]> to pick an available judge. Example:
caliper run my-skill.eval.yaml --judge-model claude-code:claude-haiku-4-5-20251001.
- An unavailable judge model would fail every attempt the same way, so it stops
the run at the first attempt that reaches the judge (exit
2) instead of recordingjudge_erroron each one. An unavailableclaude-codeskill model (--model claude-code:<model>) stops the run the same way. - An authentication failure or a rate limit stays a per-attempt
judge_error. - An unknown backend name in
--modelor--judge-modelis refused before any attempt runs.
A task passes only because of assert:
When a task has only assert:, no LLM judge runs. Add expect: if you also want
an LLM to evaluate the transcript.
Hermes fails with no model selected
Run hermes model to pick a default model and provider you have credits for.
Contributing
Contributions are welcome. See CONTRIBUTING.md for
good first areas, the pre-PR checklist, the ruff formatting convention and
pinned version, and the one-time pre-commit install step.
Release files for caliper-eval 0.13.0
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | |
|---|---|---|---|
| caliper_eval-0.13.0.tar.gz | 433.9 kB | Details |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Reset |
|---|---|---|---|---|
| caliper_eval-0.13.0-py3-none-any.whl | Python 3 | none | any | Details |
Total release size: 596.9 kB
Release files / caliper_eval-0.13.0.tar.gz
| Download URL | caliper_eval-0.13.0.tar.gz |
|---|---|
| Size | 433.9 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
7ce4846ff0de9149f3e0acf918b92b2750e17a60e29a0757f883825a9acf69da
|
|
BLAKE2b-256 checksum How to use checksums |
e1ad236ad39710c2c2ea275bb0ef5f6f681b76eb5426f0842cbaf62472af0650
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.13.14
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Sep 24, 2026.
Transparency logRelease files / caliper_eval-0.13.0-py3-none-any.whl
| Download URL | caliper_eval-0.13.0-py3-none-any.whl |
|---|---|
| Size | 163.0 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
77fb4bb9e247e7615b482b4697806b0708af3ff1aff644a1505cead09e68b6f1
|
|
BLAKE2b-256 checksum How to use checksums |
8abd9a9f987eddc6fac2926ce278d4fc16667263a5a3cf11346ecc80f4e9be38
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.13.14
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Sep 24, 2026.
Transparency log