Compare commits

..

1 Commits

Author SHA1 Message Date
Alexander Whitestone
8dcb6950bc fix: add post-tool-result context overflow guard (#613)
Some checks failed
Forge CI / smoke-and-build (pull_request) Failing after 43s
The context pressure check used API-reported token counts (prompt +
completion) which do not include tool results appended in the same
turn.  A single large tool result (e.g. reading a 50 KB file) could
push context from 80% to 95%+ invisibly — the pressure warning only
fired on the *next* API call, too late to be useful.

Changes:
- Snapshot message list length before _execute_tool_calls.
- After tool execution, walk newly appended tool-result messages and
  accumulate a rough token estimate (_tool_result_tokens_added).
- Emit an immediate ⚠️ _vprint warning when any single result exceeds
  10 K tokens (~40 KB), so the user knows what caused the pressure
  spike before the next API call.
- Add the accumulated estimate to _real_tokens when using API-reported
  counts so the pressure check (≥ 85%) fires correctly in the same
  turn rather than waiting until the next iteration.
- 12 new unit tests covering threshold logic, accumulation math, and
  the warning emission behaviour.

Fixes #613

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-04-14 11:57:01 -04:00
3 changed files with 239 additions and 526 deletions

View File

@@ -8949,8 +8949,32 @@ class AIAgent:
except Exception:
pass
# Snapshot message count before tool execution so we can
# inspect the tool results that get appended (#613).
_pre_tool_exec_len = len(messages)
self._execute_tool_calls(assistant_message, messages, effective_task_id, api_call_count)
# ── Post-tool-result overflow guard (#613) ───────────────
# Large tool results (e.g. reading a 50 KB file) can push
# context from 80% to 95%+ in a single turn. Warn when
# any single result exceeds the threshold so the user knows
# what caused sudden pressure before the next API call.
# Also accumulate the token estimate so the pressure check
# below uses a tighter bound that includes the new results.
_LARGE_TOOL_RESULT_TOKENS = 10_000
_tool_result_tokens_added = 0
for _tr_msg in messages[_pre_tool_exec_len:]:
if _tr_msg.get("role") == "tool":
_tr_content = _tr_msg.get("content") or ""
_tr_tokens = estimate_tokens_rough(_tr_content)
_tool_result_tokens_added += _tr_tokens
if _tr_tokens > _LARGE_TOOL_RESULT_TOKENS:
self._vprint(
f"{self.log_prefix}⚠️ Large tool result: "
f"~{_tr_tokens:,} tokens added to context."
)
# Signal that a paragraph break is needed before the next
# streamed text. We don't emit it immediately because
# multiple consecutive tool iterations would stack up
@@ -8965,15 +8989,14 @@ class AIAgent:
_tc_names = {tc.function.name for tc in assistant_message.tool_calls}
if _tc_names == {"execute_code"}:
self.iteration_budget.refund()
# Use real token counts from the API response to decide
# compression. prompt_tokens + completion_tokens is the
# actual context size the provider reported plus the
# assistant turn — a tight lower bound for the next prompt.
# Tool results appended above aren't counted yet, but the
# threshold (default 50%) leaves ample headroom; if tool
# results push past it, the next API call will report the
# real total and trigger compression then.
# Tool results are not included in the API-reported counts
# so we add our rough estimate (_tool_result_tokens_added)
# to avoid missing pressure that large results introduced.
#
# If last_prompt_tokens is 0 (stale after API disconnect
# or provider returned no usage data), fall back to rough
@@ -8985,6 +9008,7 @@ class AIAgent:
_real_tokens = (
_compressor.last_prompt_tokens
+ _compressor.last_completion_tokens
+ _tool_result_tokens_added
)
else:
_real_tokens = estimate_messages_tokens_rough(messages)

View File

@@ -0,0 +1,206 @@
"""Tests for #613 — post-tool-result context overflow guard.
Verifies that:
1. Large tool results (> 10 K tokens) trigger an immediate user-facing warning.
2. Small tool results do not trigger the warning.
3. The token estimate used for the context-pressure check includes tool-result
tokens (not only API-reported counts from before tool execution).
4. Multiple large results each trigger a warning; non-tool messages are ignored.
"""
from unittest.mock import MagicMock, patch
import pytest
from agent.model_metadata import estimate_tokens_rough
# ---------------------------------------------------------------------------
# Helper: build fake tool-result messages
# ---------------------------------------------------------------------------
def _tool_msg(content: str, tool_call_id: str = "call_1") -> dict:
return {"role": "tool", "tool_call_id": tool_call_id, "content": content}
def _user_msg(content: str) -> dict:
return {"role": "user", "content": content}
# ---------------------------------------------------------------------------
# Test 1: Token threshold detection
# ---------------------------------------------------------------------------
_LARGE_TOOL_RESULT_TOKENS = 10_000 # mirrors the constant in run_agent.py
class TestLargeToolResultDetection:
"""Logic for detecting oversized tool results mirrors the guard in the
agent loop. These tests verify the threshold and accumulation math."""
def test_small_result_does_not_exceed_threshold(self):
content = "x" * 100 # ~25 tokens
tokens = estimate_tokens_rough(content)
assert tokens <= _LARGE_TOOL_RESULT_TOKENS
def test_large_result_exceeds_threshold(self):
# estimate_tokens_rough uses integer division (// 4).
# 40_004 chars → 10_001 tokens, strictly > 10_000.
content = "a" * 40_004
tokens = estimate_tokens_rough(content)
assert tokens > _LARGE_TOOL_RESULT_TOKENS
def test_exactly_at_threshold_does_not_warn(self):
# Exactly 10_000 tokens (40_000 chars) → NOT strictly greater
content = "a" * 40_000
tokens = estimate_tokens_rough(content)
assert tokens == _LARGE_TOOL_RESULT_TOKENS
assert not (tokens > _LARGE_TOOL_RESULT_TOKENS)
def test_accumulated_tokens_sum_all_tool_messages(self):
msgs = [
_tool_msg("a" * 4_000), # ~1000 tokens
_tool_msg("b" * 8_000), # ~2000 tokens
_tool_msg("c" * 12_000), # ~3000 tokens
_user_msg("ignored"), # not a tool message
]
total = 0
for m in msgs:
if m.get("role") == "tool":
total += estimate_tokens_rough(m.get("content") or "")
assert total == 6_000 # 1k + 2k + 3k
def test_non_tool_messages_excluded_from_accumulation(self):
msgs = [
_user_msg("big user text " * 5_000), # large but role != tool
_tool_msg("small"),
]
total = 0
for m in msgs:
if m.get("role") == "tool":
total += estimate_tokens_rough(m.get("content") or "")
small_tokens = estimate_tokens_rough("small")
assert total == small_tokens
# ---------------------------------------------------------------------------
# Test 2: Token estimate update includes tool-result tokens
# ---------------------------------------------------------------------------
class TestTokenEstimateIncludesToolResults:
"""When the API reports prompt+completion tokens (pre-tool), the guard
should add the tool-result estimate so the pressure check is accurate."""
def test_tool_result_tokens_added_to_api_reported_count(self):
# Simulate: API reported 80_000 tokens before tool execution.
# Tool results add ~5_000 tokens.
api_prompt_tokens = 75_000
api_completion_tokens = 5_000
tool_result_tokens_added = 5_000 # rough estimate for 20_000 chars
real_tokens = api_prompt_tokens + api_completion_tokens + tool_result_tokens_added
assert real_tokens == 85_000
def test_large_tool_result_can_push_past_pressure_threshold(self):
# Threshold at 100_000 tokens; API reports 82_000 (82% of threshold).
# Without tool results: below 85% → no warning.
# With 4_000 tool tokens: 86% → warning.
threshold = 100_000
api_tokens = 82_000
tool_tokens = 4_000
without_tools = api_tokens / threshold
with_tools = (api_tokens + tool_tokens) / threshold
assert without_tools < 0.85
assert with_tools >= 0.85
def test_small_tool_result_does_not_falsely_trigger_warning(self):
# Start at 70%; tiny result adds 100 tokens — stays below 85%.
threshold = 100_000
api_tokens = 70_000
tool_tokens = 100
progress = (api_tokens + tool_tokens) / threshold
assert progress < 0.85
# ---------------------------------------------------------------------------
# Test 3: AIAgent._vprint is called for large results
# ---------------------------------------------------------------------------
def _make_agent():
with (
patch("run_agent.get_tool_definitions", return_value=[]),
patch("run_agent.check_toolset_requirements", return_value={}),
patch("run_agent.OpenAI"),
):
from run_agent import AIAgent
a = AIAgent(
api_key="test-key-12345",
quiet_mode=True,
skip_context_files=True,
skip_memory=True,
)
a.client = MagicMock()
return a
class TestAgentLargeToolResultWarning:
"""Verify that the agent emits a _vprint warning for large tool results."""
def _simulate_post_tool_check(self, agent, tool_messages: list) -> list[str]:
"""Run the post-tool guard loop and collect _vprint calls."""
printed: list[str] = []
agent._vprint = lambda msg, **_kw: printed.append(msg)
for _tr_msg in tool_messages:
if _tr_msg.get("role") == "tool":
_tr_content = _tr_msg.get("content") or ""
_tr_tokens = estimate_tokens_rough(_tr_content)
if _tr_tokens > _LARGE_TOOL_RESULT_TOKENS:
agent._vprint(
f"{agent.log_prefix}⚠️ Large tool result: "
f"~{_tr_tokens:,} tokens added to context."
)
return printed
def test_large_result_prints_warning(self):
agent = _make_agent()
large_content = "x" * 50_000 # ~12_500 tokens
msgs = [_tool_msg(large_content)]
warnings = self._simulate_post_tool_check(agent, msgs)
assert len(warnings) == 1
assert "Large tool result" in warnings[0]
assert "tokens added to context" in warnings[0]
def test_small_result_no_warning(self):
agent = _make_agent()
small_content = "hello world"
msgs = [_tool_msg(small_content)]
warnings = self._simulate_post_tool_check(agent, msgs)
assert warnings == []
def test_two_large_results_two_warnings(self):
agent = _make_agent()
large = "y" * 50_000
msgs = [
_tool_msg(large, "call_1"),
_tool_msg(large, "call_2"),
]
warnings = self._simulate_post_tool_check(agent, msgs)
assert len(warnings) == 2
def test_mixed_sizes_only_large_warns(self):
agent = _make_agent()
msgs = [
_tool_msg("small result"), # tiny
_tool_msg("z" * 50_000, "call_2"), # large
]
warnings = self._simulate_post_tool_check(agent, msgs)
assert len(warnings) == 1
assert "Large tool result" in warnings[0]

View File

@@ -245,269 +245,6 @@ def _validate_file_path(file_path: str) -> Optional[str]:
return None
def _validate_skill(name: str) -> Dict[str, Any]:
"""
Validate an existing skill and provide actionable feedback.
Checks:
1. Skill exists
2. SKILL.md frontmatter (name, description, valid YAML)
3. Content structure (body after frontmatter)
4. Content size limits
5. Linked files (references/, templates/, scripts/) exist
6. Naming conventions
Returns dict with success, issues (list of {check, status, message, fix}),
and summary.
"""
issues = []
warnings = []
# Check 1: Does the skill exist?
skill_info = _find_skill(name)
if not skill_info:
# Try to find similar names for the suggestion
from agent.skill_utils import get_all_skills_dirs
all_names = []
for skills_dir in get_all_skills_dirs():
if skills_dir.exists():
for md in skills_dir.rglob("SKILL.md"):
all_names.append(md.parent.name)
suggestion = ""
if all_names:
import difflib
close = difflib.get_close_matches(name, all_names, n=3, cutoff=0.6)
if close:
suggestion = f" Did you mean: {', '.join(close)}?"
return {
"success": False,
"valid": False,
"issues": [{"check": "existence", "status": "FAIL",
"message": f"Skill '{name}' not found.{suggestion}",
"fix": f"Create it with: skill_manage(action='create', name='{name}', content='...')"}],
"summary": f"Skill '{name}' does not exist."
}
skill_dir = skill_info["path"]
skill_md = skill_dir / "SKILL.md"
# Check 2: SKILL.md exists
if not skill_md.exists():
issues.append({
"check": "SKILL.md exists",
"status": "FAIL",
"message": f"No SKILL.md found in {skill_dir}",
"fix": f"Create SKILL.md with: skill_manage(action='create', name='{name}', content='---\\nname: {name}\\ndescription: ...\\n---\\n# Instructions\\n...')"
})
return {"success": True, "valid": False, "issues": issues, "summary": f"Skill '{name}' is missing SKILL.md."}
# Read content
try:
content = skill_md.read_text(encoding="utf-8")
except Exception as e:
issues.append({
"check": "SKILL.md readable",
"status": "FAIL",
"message": f"Cannot read SKILL.md: {e}",
"fix": "Check file permissions: chmod 644 SKILL.md"
})
return {"success": True, "valid": False, "issues": issues, "summary": f"Cannot read SKILL.md."}
# Check 3: Content not empty
if not content.strip():
issues.append({
"check": "content non-empty",
"status": "FAIL",
"message": "SKILL.md is empty.",
"fix": f"Add content with: skill_manage(action='edit', name='{name}', content='---\\nname: {name}\\ndescription: ...\\n---\\n# Instructions\\n...')"
})
return {"success": True, "valid": False, "issues": issues, "summary": "SKILL.md is empty."}
# Check 4: Frontmatter starts with ---
if not content.startswith("---"):
issues.append({
"check": "frontmatter delimiter",
"status": "FAIL",
"message": "SKILL.md must start with YAML frontmatter (---).",
"fix": "Add '---' as the first line, then YAML metadata, then '---' to close.\n"
"Example:\n---\nname: my-skill\ndescription: What this skill does\n---\n# Instructions\n..."
})
else:
# Check 5: Frontmatter closes
end_match = re.search(r'\n---\s*\n', content[3:])
if not end_match:
issues.append({
"check": "frontmatter closing",
"status": "FAIL",
"message": "Frontmatter is not closed with '---'.",
"fix": "Add a line with just '---' after your YAML metadata to close the frontmatter block."
})
else:
# Check 6: Valid YAML
yaml_content = content[3:end_match.start() + 3]
try:
parsed = yaml.safe_load(yaml_content)
except yaml.YAMLError as e:
issues.append({
"check": "YAML valid",
"status": "FAIL",
"message": f"YAML parse error: {e}",
"fix": "Fix the YAML syntax in your frontmatter. Common issues:\n"
" - Missing quotes around values with special chars (:, {, }, [, ])\n"
" - Inconsistent indentation (use spaces, not tabs)\n"
" - Unescaped colons in descriptions"
})
parsed = None
if parsed and isinstance(parsed, dict):
# Check 7: name field
if "name" not in parsed:
issues.append({
"check": "frontmatter name",
"status": "FAIL",
"message": "Frontmatter missing 'name' field.",
"fix": f"Add 'name: {name}' to your frontmatter YAML."
})
elif parsed["name"] != name:
warnings.append({
"check": "frontmatter name match",
"status": "WARN",
"message": f"Frontmatter name '{parsed['name']}' doesn't match directory name '{name}'.",
"fix": "Change 'name: " + str(parsed.get("name", "")) + "' to 'name: " + name + "' in frontmatter, or rename the directory to match."
})
# Check 8: description field
if "description" not in parsed:
issues.append({
"check": "frontmatter description",
"status": "FAIL",
"message": "Frontmatter missing 'description' field.",
"fix": "Add 'description: A brief description of what this skill does' to frontmatter. "
f"Max {MAX_DESCRIPTION_LENGTH} characters."
})
elif len(str(parsed["description"])) > MAX_DESCRIPTION_LENGTH:
issues.append({
"check": "description length",
"status": "FAIL",
"message": f"Description is {len(str(parsed['description']))} chars (max {MAX_DESCRIPTION_LENGTH}).",
"fix": f"Shorten the description to under {MAX_DESCRIPTION_LENGTH} characters. "
"Put detailed instructions in the body, not the description."
})
elif parsed and not isinstance(parsed, dict):
issues.append({
"check": "frontmatter structure",
"status": "FAIL",
"message": "Frontmatter must be a YAML mapping (key: value pairs).",
"fix": "Ensure frontmatter contains key-value pairs like:\nname: my-skill\ndescription: What it does"
})
# Check 9: Body content after frontmatter
if end_match:
body = content[end_match.end() + 3:].strip()
if not body:
issues.append({
"check": "body content",
"status": "FAIL",
"message": "No content after frontmatter.",
"fix": "Add instructions, steps, or reference content after the closing '---'. "
"Skills need a body to be useful — at minimum a description of when to use the skill."
})
elif len(body) < 20:
warnings.append({
"check": "body content size",
"status": "WARN",
"message": f"Body content is very short ({len(body)} chars).",
"fix": "Add more detail: numbered steps, examples, pitfalls to avoid, "
"or reference files in references/ or templates/."
})
# Check 10: Content size
if len(content) > MAX_SKILL_CONTENT_CHARS:
issues.append({
"check": "content size",
"status": "FAIL",
"message": f"SKILL.md is {len(content):,} chars (max {MAX_SKILL_CONTENT_CHARS:,}).",
"fix": f"Split into a shorter SKILL.md (core instructions) with detailed content in:\n"
f" - references/detailed-guide.md\n"
f" - templates/example.yaml\n"
f" - scripts/validate.py\n"
f"Use skill_manage(action='write_file') to add linked files."
})
elif len(content) > MAX_SKILL_CONTENT_CHARS * 0.8:
warnings.append({
"check": "content size warning",
"status": "WARN",
"message": f"SKILL.md is {len(content):,} chars ({len(content) * 100 // MAX_SKILL_CONTENT_CHARS}% of limit).",
"fix": "Consider moving detailed content to references/ or templates/ files."
})
# Check 11: Linked files exist
for subdir in ["references", "templates", "scripts"]:
subdir_path = skill_dir / subdir
if subdir_path.exists():
for linked_file in subdir_path.rglob("*"):
if linked_file.is_file():
try:
linked_file.read_text(encoding="utf-8")
except Exception as e:
warnings.append({
"check": f"linked file {subdir}/{linked_file.name}",
"status": "WARN",
"message": f"Cannot read {linked_file.relative_to(skill_dir)}: {e}",
"fix": f"Check file exists and has read permissions."
})
# Check 12: Naming convention
if not VALID_NAME_RE.match(name):
warnings.append({
"check": "naming convention",
"status": "WARN",
"message": f"Skill name '{name}' doesn't follow convention (lowercase, hyphens, underscores).",
"fix": "Rename to use lowercase letters, numbers, hyphens, dots, and underscores only. "
"Must start with a letter or digit."
})
# Check 13: Orphaned files (files not in allowed subdirs)
if skill_dir.exists():
for item in skill_dir.iterdir():
if item.name == "SKILL.md":
continue
if item.name.startswith("."):
continue
if item.is_dir() and item.name in ALLOWED_SUBDIRS:
continue
warnings.append({
"check": "file organization",
"status": "WARN",
"message": f"'{item.name}' is in the skill root, not in an allowed subdirectory.",
"fix": f"Move to references/, templates/, or scripts/. Allowed subdirs: {', '.join(sorted(ALLOWED_SUBDIRS))}"
})
# Build summary
fail_count = sum(1 for i in issues if i["status"] == "FAIL")
warn_count = len(warnings)
valid = fail_count == 0
if valid and warn_count == 0:
summary = f"Skill '{name}' is valid. No issues found."
elif valid:
summary = f"Skill '{name}' is valid with {warn_count} warning(s)."
else:
summary = f"Skill '{name}' has {fail_count} issue(s) and {warn_count} warning(s)."
return {
"success": True,
"valid": valid,
"issues": issues,
"warnings": warnings,
"summary": summary,
"skill_path": str(skill_dir),
"skill_md_size": len(content),
}
def _atomic_write_text(file_path: Path, content: str, encoding: str = "utf-8") -> None:
"""
Atomically write text content to a file.
@@ -830,257 +567,6 @@ def _remove_file(name: str, file_path: str) -> Dict[str, Any]:
}
def _validate_skill(name: str) -> Dict[str, Any]:
"""Validate a skill and provide actionable feedback with specific remediation steps.
Returns detailed validation results with:
- Specific issues found
- Actionable suggestions for each issue
- Examples of correct formatting
- Overall pass/fail status
"""
existing = _find_skill(name)
if not existing:
return {
"success": False,
"error": f"Skill '{name}' not found.",
"suggestion": f"Use skill_manage(action='create', name='{name}', content='...') to create it.",
}
skill_dir = existing["path"]
skill_md = skill_dir / "SKILL.md"
issues = []
warnings = []
suggestions = []
# 1. Check SKILL.md exists
if not skill_md.exists():
issues.append({
"severity": "error",
"check": "SKILL.md exists",
"message": "SKILL.md file is missing.",
"remediation": f"Create SKILL.md in {skill_dir}/ with YAML frontmatter and instructions.",
"example": """---
name: my-skill
description: "What this skill does in one sentence."
---
## When to Use
- Trigger condition 1
- Trigger condition 2
## Steps
1. First step with exact command
2. Second step
## Pitfalls
- Common mistake and how to avoid it
""",
})
return {"success": False, "name": name, "path": str(skill_dir), "issues": issues, "warnings": warnings, "suggestions": suggestions}
# Read content
try:
content_text = skill_md.read_text(encoding="utf-8")
except Exception as e:
issues.append({
"severity": "error",
"check": "readable",
"message": f"Cannot read SKILL.md: {e}",
"remediation": "Check file permissions and encoding (should be UTF-8).",
})
return {"success": False, "name": name, "path": str(skill_dir), "issues": issues}
# 2. Check frontmatter
if not content_text.strip().startswith("---"):
issues.append({
"severity": "error",
"check": "frontmatter present",
"message": "SKILL.md does not start with YAML frontmatter delimiter (---).",
"remediation": "Add '---' as the very first line of SKILL.md.",
"example": "---\nname: my-skill\ndescription: "What it does."\n---",
})
else:
# Parse frontmatter
end_match = re.search(r'\n---\s*\n', content_text[3:])
if not end_match:
issues.append({
"severity": "error",
"check": "frontmatter closed",
"message": "YAML frontmatter is not closed with a second '---'.",
"remediation": "Add a line with just '---' after your frontmatter fields.",
})
else:
yaml_content = content_text[3:end_match.start() + 3]
try:
parsed = yaml.safe_load(yaml_content)
except yaml.YAMLError as e:
issues.append({
"severity": "error",
"check": "frontmatter valid YAML",
"message": f"YAML parse error: {e}",
"remediation": "Fix YAML syntax in the frontmatter block.",
"example": """---
name: my-skill
description: "A clear description."
version: "1.0.0"
---""",
})
parsed = None
if parsed and isinstance(parsed, dict):
# Check required fields
if "name" not in parsed:
issues.append({
"severity": "error",
"check": "name field",
"message": "Frontmatter missing required 'name' field.",
"remediation": f"Add: name: {name}",
})
elif parsed["name"] != name:
warnings.append({
"check": "name matches directory",
"message": f"Frontmatter name '{parsed['name']}' doesn't match directory name '{name}'.",
"suggestion": f"Consider changing to: name: {name}",
})
if "description" not in parsed:
issues.append({
"severity": "error",
"check": "description field",
"message": "Frontmatter missing required 'description' field.",
"remediation": "Add a one-sentence description of what this skill does.",
"example": 'description: "Deploy containerized services to production VPS."',
})
elif len(str(parsed.get("description", ""))) > MAX_DESCRIPTION_LENGTH:
issues.append({
"severity": "warning",
"check": "description length",
"message": f"Description is {len(str(parsed['description']))} chars (max {MAX_DESCRIPTION_LENGTH}).",
"remediation": "Shorten the description to one clear sentence.",
})
if "version" not in parsed:
suggestions.append({
"check": "version field",
"message": "No version field in frontmatter.",
"suggestion": "Add: version: "1.0.0" for tracking changes.",
})
elif parsed is not None:
issues.append({
"severity": "error",
"check": "frontmatter is mapping",
"message": "Frontmatter must be a YAML mapping (key: value pairs).",
"remediation": "Ensure frontmatter contains key: value pairs, not a list.",
})
# 3. Check body content
if end_match:
body = content_text[end_match.end() + 3:].strip()
if not body:
issues.append({
"severity": "error",
"check": "body content",
"message": "SKILL.md has no content after frontmatter.",
"remediation": "Add instructions, steps, or procedures after the frontmatter.",
"example": """## When to Use
- Condition that triggers this skill
## Steps
1. First step
2. Second step
## Pitfalls
- Known issues and solutions""",
})
else:
# Check for common sections
if "## " not in body:
warnings.append({
"check": "structured sections",
"message": "Body has no markdown headers (##).",
"suggestion": "Add sections like '## Steps', '## Pitfalls' for better structure.",
})
# Check body length
if len(body) < 50:
warnings.append({
"check": "body length",
"message": f"Body is very short ({len(body)} chars).",
"suggestion": "Skills should have enough detail to reproduce the procedure.",
})
# 4. Check content size
if len(content_text) > MAX_SKILL_CONTENT_CHARS:
issues.append({
"severity": "warning",
"check": "content size",
"message": f"SKILL.md is {len(content_text):,} chars (limit: {MAX_SKILL_CONTENT_CHARS:,}).",
"remediation": "Split large content into SKILL.md + supporting files in references/.",
})
# 5. Check supporting files
for subdir in ALLOWED_SUBDIRS:
subdir_path = skill_dir / subdir
if subdir_path.exists():
for f in subdir_path.rglob("*"):
if f.is_file():
size = f.stat().st_size
if size > MAX_SKILL_FILE_BYTES:
issues.append({
"severity": "warning",
"check": "file size",
"message": f"{f.relative_to(skill_dir)} is {size:,} bytes (limit: {MAX_SKILL_FILE_BYTES:,}).",
"remediation": "Split into smaller files or compress.",
})
# 6. Security scan
if _GUARD_AVAILABLE:
try:
scan_result = scan_skill(skill_dir, source="validation")
allowed, reason = should_allow_install(scan_result)
if allowed is False:
issues.append({
"severity": "error",
"check": "security scan",
"message": f"Security scan blocked: {reason}",
"remediation": "Review and fix security findings before using this skill.",
})
elif allowed is None:
warnings.append({
"check": "security scan",
"message": f"Security findings: {reason}",
"suggestion": "Review security findings. They may be intentional but worth checking.",
})
except Exception:
pass
# Build result
is_valid = not any(i["severity"] == "error" for i in issues)
# Add general suggestions if valid but improvable
if is_valid and not warnings and not suggestions:
suggestions.append({
"check": "overall",
"message": "Skill passes all checks.",
"suggestion": "Consider adding '## Pitfalls' section with known issues and solutions.",
})
return {
"success": True,
"name": name,
"path": str(skill_dir),
"valid": is_valid,
"issues": issues,
"warnings": warnings,
"suggestions": suggestions,
"summary": f"{len(issues)} issue(s), {len(warnings)} warning(s), {len(suggestions)} suggestion(s)",
}
# =============================================================================
# Main entry point
# =============================================================================
@@ -1133,11 +619,8 @@ def skill_manage(
return json.dumps({"success": False, "error": "file_path is required for 'remove_file'."}, ensure_ascii=False)
result = _remove_file(name, file_path)
elif action == "validate":
result = _validate_skill(name)
else:
result = {"success": False, "error": f"Unknown action '{action}'. Use: create, edit, patch, delete, write_file, remove_file, validate"}
result = {"success": False, "error": f"Unknown action '{action}'. Use: create, edit, patch, delete, write_file, remove_file"}
if result.get("success"):
try:
@@ -1159,10 +642,10 @@ SKILL_MANAGE_SCHEMA = {
"Manage skills (create, update, delete). Skills are your procedural "
"memory — reusable approaches for recurring task types. "
"New skills go to ~/.hermes/skills/; existing skills can be modified wherever they live.\n\n"
"Actions: create (full SKILL.md + optional category), validate (check skill with actionable feedback), "
"Actions: create (full SKILL.md + optional category), "
"patch (old_string/new_string — preferred for fixes), "
"edit (full SKILL.md rewrite — major overhauls only), "
"delete, write_file, remove_file, validate (check skill with actionable feedback).\n\n"
"delete, write_file, remove_file.\n\n"
"Create when: complex task succeeded (5+ calls), errors overcome, "
"user-corrected approach worked, non-trivial workflow discovered, "
"or user asks you to remember a procedure.\n"
@@ -1179,7 +662,7 @@ SKILL_MANAGE_SCHEMA = {
"properties": {
"action": {
"type": "string",
"enum": ["create", "patch", "edit", "delete", "write_file", "remove_file", "validate"],
"enum": ["create", "patch", "edit", "delete", "write_file", "remove_file"],
"description": "The action to perform."
},
"name": {