evals-init
Use when standing up evals/{system}/ for the first time — scaffolds the EDD directory structure, picks PromptFoo or DeepEval by tech stack, and generates a security baseline.
How do I install this agent skill?
npx skills add https://github.com/tikalk/adlc-team-skills --skill evals-initIs this agent skill safe to install?
- Gen Agent Trust Hubwarn
The skill initializes evaluation environments but contains a potential command injection vulnerability in its bash setup script and possesses an indirect prompt injection surface through project configuration files.
- Socketpass
No alerts
- Snykpass
Risk: LOW · No issues
What does this agent skill do?
evals-init
What this skill does
Initialize the project-level evaluation directory structure following EDD (Eval-Driven Development) principles to prepare for systematic evaluation development. This is completely standalone with zero spec-kit dependencies.
Output:
- Directory Structure -
evals/{system}/with proper organization (promptfoo | deepeval) - Security Baseline - Auto-created graders for PII leakage, prompt injection, hallucination detection, misinformation detection
- Configuration Files - Standalone config.yml and goldset templates under
.adlc/evals/ - Auto-handoff to
/evals-specifyto begin error analysis
Key EDD Principles Applied:
- Principle I: Spec-Driven Contracts - Evals validate spec compliance
- Principle II: Binary Pass/Fail - No Likert scales in grader templates
- Principle IV: Evaluation Pyramid - Tier 1 (fast) + Tier 2 (goldset) structure
- Principle IX: Test Data as Code - Version control setup for datasets
When to use
- Starting systematic evaluation: Set up the initial evaluation harness for your application
- EDD Adoption: Converting from traditional testing to evaluation-driven development
- Security-first evaluation: Auto-generate baseline security checks from the start
When NOT to use
- Evals directory already exists: Use
/evals-validateto run tests, or/evals-specifyto add criteria - Evaluating team directives: This is for project-level application behavior testing, not directives compliance
Process
User Input
$ARGUMENTS
Parse flags from the arguments first, then treat remaining text as focus areas:
--system SYSTEM— Choosepromptfooordeepeval. If omitted, choose interactively based on tech stack.- Remaining text — System description (focus setup)
Execution Steps
Phase 1: Tech Stack Detection
- Scan project manifests (
package.json,requirements.txt,Cargo.toml,go.mod, etc.) - Recommends PromptFoo for mixed/JS stacks; DeepEval for Python-native stacks
Phase 2: Create Directory Structure
Creates:
evals/
├── {system}/ # promptfoo | deepeval
│ ├── goldset.md # Published goldset
│ ├── goldset.json # Auto-generated for system consumption
│ ├── config.yml # System-specific configuration
│ ├── config.{js,py} # Generated system config (.js for promptfoo, .py for deepeval)
│ └── graders/ # Binary pass/fail graders
│ ├── check_pii_leakage.py # Security baseline
│ ├── check_prompt_injection.py # Security baseline
│ ├── check_hallucination.py # Security baseline
│ └── check_misinformation.py # Security baseline
├── results/ # Git-ignored run outputs
└── .adlc/
└── drafts/evals/ # Draft eval records (Markdown + YAML)
Phase 3: Configuration Copy
- Create
.adlc/evals/if missing. - Copy
skills/evals/evals-templates/evals-config-template.ymlto.adlc/evals/evals-config.yml.
Phase 4: Auto-Handoff
Trigger /evals-specify to begin error analysis.
Verification
evals/{system}/goldset.mdexists (initially empty).adlc/evals/evals-config.ymlexists- Graders directory populated with 4 security baseline python scripts
- Results directory contains
.gitignoreto prevent versioning traces - Handover report generated with recommended framework and next steps
How can the creator link this skill?
Add the canonical catalog link to the repository README so users can inspect current installs and available audits. The publishing guide covers the complete discovery path.
<a href="https://skillzs.dev/skills/tikalk/adlc-team-skills/evals-init">View evals-init on skillZs</a>