Hacktoberfest 2026: le issue che i maintainer hanno segnato per ottobre, aperte e adatte ai principianti. Sfoglia le issue Hacktoberfest

fix(skill-evals): 32 eval steps without a user-prompt-template.md get security-issue-import's prompt

Chiusa
  • Qualcosa non va?
#1,492 0 commenti 0 reazioni 0 assegnatari Vedi su GitHub

I maintainer di solito rispondono entro 1 giorno

Nessuno ha ancora preso questa issue.

Valutazione

Difficoltà
3/5
Tempo stimato
1-2 giorni
Idoneità per principianti
72/100
Tipo di issue
Bug
Chiarezza
Specificata chiaramente
Stato di attività
Attiva
Stack tecnologico
python
Ambito
testing, tooling

Direzione di ricerca

Start in tools/skill-evals/src/skill_evals/runner.py:194-197 and inspect the USER_PROMPT_TEMPLATE definition at lines 96-110, then compare the affected eval directories and security-issue-import/step-2a-semantic-sweep. Give the security step its explicit template, make the fallback neutral, and re-run the 32 affected steps; done means the prompts are appropriate and any verdict changes are recorded.

Scritto dal modello di indicizzazione a partire dal testo della issue.

Descrizione

What

When a fixtures directory has no user-prompt-template.md, the runner falls back to USER_PROMPT_TEMPLATE (tools/skill-evals/src/skill_evals/runner.py:194-197). That default (lines 96-110) is the security-issue-import template:

## Existing open trackers (corpus)
{corpus}
## Reporter roster (existing trackers mapped to reporter email)
{roster}
## Incoming report
{report}
Apply the semantic sweep and reporter-identity check. Return JSON only.

33 step directories under tools/skill-evals/evals/ have no template. One is security-issue-import/step-2a-semantic-sweep, the step the default was written for. The other 32 belong to other skills:

  • every step of release-announce-draft, release-archive-sweep, release-audit-report, release-keys-sync, release-prepare, release-rc-cut, release-verify-rc and release-vote-tally (30 steps);
  • reviewer-routing/step-0-preflight;
  • non-asf-profile-smoke/step-release-backend-preflight.

For those steps the model gets an empty "Existing open trackers" section, an empty "Reporter roster" section, the case input under "Incoming report", and an instruction to run a semantic sweep and a reporter-identity check that has nothing to do with the step under test.

Why it matters

The system prompt is correct: it carries the step extracted from the skill. The user prompt is not: it asks for an import-skill task. A PASS on these steps says less than it appears to, and a FAIL may come from the prompt rather than the skill. AGENTS.md makes the eval suite the check for every skill change, and almost all of the affected steps are in the release family. This does not mean these evals fail; I have not measured how many verdicts change with a neutral prompt.

Suggested fix
  1. Make the default template neutral: the {report} slot and "Return JSON only.", nothing else. str.format() ignores the unused corpus / roster arguments, so the call site does not change.
  2. Give security-issue-import/step-2a-semantic-sweep its own user-prompt-template.md holding today's default, so its prompt stays the same.
  3. Re-run the 32 affected steps and note any verdict that moves.

The alternative is to make the template mandatory and have the runner fail when it is missing, which means 32 new files.

Found via

Reading the runner's prompt assembly while mapping the eval harness. The 33 directories are those with a step-config.json and no user-prompt-template.md on main (37670575).

Lingua principale
Python
Stelle
124
Fork
114
Merge medio
15h 48m
PR unite (30g)
370

Preparare l'ambiente

Come iniziare

  1. Leggi tutta la issue e poi la guida ai contributi del progetto.
  2. Commenta sulla issue per dire che te ne occupi tu — evita che due persone facciano lo stesso lavoro.
  3. Fai un fork del repository e lavora su un branch.
  4. Apri una pull request che faccia riferimento al numero della issue.

Altre issue di apache/magpie

Tutte le issue di apache/magpie

Issue simili

Altre issue su Python

Ricevi le nuove issue nella tua casella

Un breve riepilogo di issue GitHub adatte ai principianti.