rag@1.0.2
CAUTION· static onlyPublisher claims: "Designs, tunes, and debugs retrieval-augmented generation (RAG) pipelines: chunking, embeddings, hybrid retrieval, reranking, and grounded answers. Use when a system returns the wrong passages, misses a document that is indexed, cites nothing, or hallucinates over good context; when choosing a vector store, an embedding model, a chunk size, or a reranker; when similarity scores collapse after a model swap; when a metadata filter empties the result set; when answers ignore mid-context facts; when follow-up questions retrieve the wrong thing; when indexing PDFs, scanned pages, tables, code, or transcripts; when GDPR erasure, tenant isolation, or prompt injection from indexed documents is the problem; or when per-query cost or p95 latency has to come down. Covers reindex migrations, corpus freshness, evaluation sets, and agentic and graph retrieval. Not for splitter internals (`rag-chunking`), scoring rubrics (`rag-evaluation`), or LangChain APIs (`langchain`)." Observed in sandbox: static analysis only — behavior not yet observed.
Coverage
Static only; nothing was run yet.The label rests on the code, the instruction files and the publisher. The honeypot run replaces this verdict when it completes.
Is [email protected] safe to install?
KillerSkills analysed it statically (a sandbox run is pending) on 2026-11-10 and scored it 72/100 (Caution). It is not known to be malicious, but it has behaviour or code a security policy should decide on before install. Summary: static analysis only — behavior not yet observed.
Behavior trace
Queued for honeypot run · static analysis onlyThis version has not been detonated yet. The score above counts behavior as unknown (50/100), so it cannot read Verified until the honeypot run completes and replaces this verdict.
Static findings
…set wants (`evaluation.md`). **After diagnosing a failure down to its cause**, add a row to `## Known Failures` in `~/Clawic/data/rag/memory.md` — date, symptom, the real cause, the fix, and whether it is still open — and k…Fix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.…replaced last quarter and still billing | **After a cost review or a saving**, write the cost per query and its date into `## Baseline` in `~/Clawic/data/rag/memory.md`, and the saving with what it cost in quality into `~/Clawic/data/rag/e…Fix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.…rsions are live (SKILL.md Rule 8). **After ingesting or re-parsing a source**, write its row to `## Corpus` in `~/Clawic/data/rag/memory.md` — source, format, document count, refresh cadence, owner, access field — and, …Fix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.…o `~/Clawic/data/rag/evals/<year>.md` naming the one variable that changed, and update the retrieval configuration in `## Index Registry` in `memory.md` — fusion method, `α` if fitted, boosts, MMR `λ`, threshold and the date it was…Fix: Put hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own.…ver the retrieval quality is comparable. **After building a multimodal path**, add the image-bearing sources to `## Corpus` in `~/Clawic/data/rag/memory.md` with their category and the description model used, record the description pro…Fix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.[system] Role, the grounding contract, the citation format, the refusal rule.Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.…he wrong stage. **After building, resizing, repointing or retiring an index**, write its row to `## Index Registry` in `~/Clawic/data/rag/memory.md` — store, index parameters, quantization, chunk count, build date — and put the…Fix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.…Clawic/data/rag/evals/<year>.md` (the golden-set run that gated the switch) and update `## Index Registry` in `memory.md` with the new index and a retirement date on the old row. Save the reindex proc…Fix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.…enance cost, and what was rejected — plus its `## Boxes` line in the same turn. Add the SQL schema source or the graph store to `## Corpus` in `memory.md` as its own row with its refresh cadence, and put a self-hosted graph or analyt…Fix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.…6 GB index into a capacity project. **After building or repointing an index**, write its row to `## Index Registry` in `~/Clawic/data/rag/memory.md` with all six fingerprint fields, the chunker, the chunk count and the build da…Fix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.Cost to the agent
Tokens estimated at four characters each. Skills load their instruction text when triggered; the figure is what that costs.
Known vulnerabilities
Vulnerability advisories (OSV) cover npm and PyPI packages; this registry has no advisory database.
What would make this Verified
8 points to 80 · weights: behavior 45%, static 25%, prompt 15%, publisher 15%- Unclaimed publisher≈ +8 on the totalClaim ivangdavila: a verified publisher gets +50 on publisher trust. It is free and usually instant with GitHub sign-in.