360 Secure SkillHub
360 安全技能中心

ML Research Skeptical Audit

该 Skill 以代码与实验文档为依据,审查机器学习研究的主张、目标函数、数据泄漏、对照公平性和评估流程,按有效性风险排序,给出 Solid/设计选择/存疑结论及可证伪检查。它不运行实验,只做静态审查与方法学分析。

antreasantoniou
antreasantoniou
热度 14.67
最近更新 2026-09-06 02:27:26
分类:数据依赖:读写文件应用场景:研究 / 代码审查 / 报告撰写

安装技能

复制下面的话术发给你的 Agent,它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill: npx secure-skills-cli add ml-research-skeptical-audit
Metadata
name
ml-research-skeptical-audit
description
Adversarial, code-cited audit of ML research claims, objectives, leakage, controls, and baseline fairness with ranked risks and explicit falsification tests. Use when asked to challenge a result or assess whether an experimental comparison is trustworthy.

ML research skeptical audit

Structure a scientific argument grounded in the actual implementation. This is a review method, not an experiment runner: reviewing code does not reproduce a figure, execute training, establish statistical significance, or prove a scientific claim.

Ground rules

  1. Code or it is unverified. Cite every structural repository claim to a file, symbol, and line range at the inspected revision. Quote short decisive snippets when useful. If the implementation is unavailable, label the claim unverified; do not invent APIs or infer code behavior from names alone.
  2. Separate units and objectives. Latent-space MSE, token cross-entropy, and contrastive losses cannot be ranked numerically against each other. Require a shared downstream task/metric with matched data and evaluation protocol before claiming superiority.
  3. Use three verdicts. Solid: implementation matches the stated intent. Design choice: defensible but sensitive to a named lever such as masking, balancing, tie-breaking, or initialization. Questionable: possibly incorrect, unfair, or misleading, paired with a discriminating counterexample or falsification. “Solid” is not a claim that the method works empirically.
  4. Rank validity risks before presentation concerns: leakage and evaluation contamination; incompatible units and unfair controls; train/eval disparity; optimization and regularization; then cosmetic issues. Explain severity and evidence rather than forcing every issue into this order.
  5. End with what would prove the audit wrong. Prefer a runnable check grounded in existing scripts; label proposed scripts and unexecuted commands as such.

Scope and trace

State the exact claim, scope (data/model/loss/training/evaluation/fairness), inspected revision, worktree caveat, and available evidence. Read repository instructions and experiment documentation. Locate the config and entry point for the specific result, not merely the current defaults. Separate executed evidence from logs provided by others and from static inference.

Trace one concrete forward pass: batch dimensions → transformations → model predictions → loss terms and reductions → optimized parameters. Mark unknown dimensions rather than inventing them. Then inspect:

  1. Data contract: dataset/collate schema, split construction, sampling, augmentation, preprocessing fits, duplicate/entity/time overlap, label-derived features, retrieval contamination, and whether validation/test data affect training or checkpoint choice.
  2. Model: forward signature, predicted versus reconstructed targets, target visibility, capacity, conditioning, masking, and possible shortcut solutions. For generative or representation-prediction methods, consider intrinsic data complexity versus model capacity without asserting an unmeasured dimension.
  3. Objective: weights, units, normalization/reduction, masking, modality/task balancing, collapse prevention, stop-gradient, and targets. Check that the implemented optimization matches the claim.
  4. Optimization: optimizer/schedules, initialization, EMA timing, gradient accumulation, mixed precision, update ordering, effective batch and token budgets, and failed/diverged runs.
  5. Evaluation: exact checkpoint selection, held-out protocol, metric units/direction/aggregation, shared task, preprocessing, inference budget, paired seeds/examples, uncertainty and multiple comparisons. Inspect the code path producing the figure, not just training metrics.
  6. Reproducibility: entry point, resolved config, code/data versions, seed handling, hardware/precision, output lineage, and unavailable artifacts. A seed alone is not reproducibility.

Controls and falsification

Choose tests that distinguish the disputed explanation from alternatives. Do not demand expensive experiments merely to fill a checklist; first use static checks and small counterexamples when sufficient.

Claim Discriminating check
A beats B on training loss Identify units; if incompatible, compare on a shared held-out downstream metric, fixed selection rule, and evaluation budget.
Fair comparison Match or explicitly account for data, steps/tokens, parameters, tuning effort, and measured compute; include extra encoders, targets, projectors, and inference cost. State which budget is controlled rather than claiming all are equivalent.
Scaling law Vary size with controlled data/compute and regularizer conventions; check optimization failures, uncertainty, and extrapolation limits.
Multitask mechanism helps Ablate terms or task dropout, include simpler baselines, and use paired seeds with uncertainty.
No leakage Trace split/preprocessing/checkpoint-selection code; check overlap at the meaningful entity/time unit and test-set reuse.
Representation is meaningful Compare shortcut/collapse or shuffled-label controls, fixed probes, and transfer under a declared evaluation protocol.

For each proposed falsification specify hypothesis, intervention, held-fixed variables, metric, decision criterion, expected discriminating outcome, and estimated resource/permission needs. Do not run training, download restricted data, launch paid compute, or mutate experiment tracking unless separately authorized. Avoid post-hoc threshold invention: state when a criterion is provisional.

Deliverable

Give the question and evidence limits; one concrete forward/loss trace with citations; Solid / Design choice / Questionable findings; ranked risks with claim impact; and a short falsification list. Cite both supporting and conflicting evidence. Distinguish “reviewed,” “executed,” “reproduced,” and “not checked.” A missing control is a limitation, not proof of misconduct or a failed method.