Don't Ship Skills Without Evals — Philipp Schmid, Google DeepMind

Hi, everyone. My name is Philip. I'm based out of Germany. I'm part of the Google DeepMind team, mostly working on Gemini API and agents. And we are going to talk about why you should not ship skills without evals. And maybe before we start, I need a little bit of your help. So if you could raise your hands if you use coding agents to write code. So yeah, hopefully every hand goes up, right? And do you use skills with it? OK. Do you have evals for those skills? Okay, that's not a lot of hands. Everyone uses Guilds, no one has evals. Hopefully we can fix that today. And very important is wipe checks fail in productions. And SkillBench is a very popular and nice eval or benchmark, which indexed over 50,000 skills from GitHub and tried to look into them. And almost none of those skills had evals. Most of them were AI-written, not really tested. And it's very hard to know if your skill is good or bad, because agents are really non-deterministic. So you might not know if your task fails because your skill is bad or if your task fails because it's way too challenging for the model. So very important. Before we go into it, I want to really make sure that we know the difference between the agents we use and the agents we build. Most of us use agents for writing code, doing productivity work. That's the agents we use. It's like anti-gravity, cursor, cloud code, and there you are the engineer, and you have context about skills. If you write some prompt to, I don't know, like help me build a new Gemini API feature, and if your agent does not invoke the skill on the first time, you will notice it very quickly. You stop your task and reprompt it or use slash commands for triggering those skills. When you build an agent, inside your application for consumer or customers they have no idea about what a skill is they don't start their prompt with use customer support skill to like help me refund or use refund skill to help me solve my problems so there's a big difference between the agents we use and how we use skills and the agents we build and how our customers might want to use skills in like the context there and what is a skill I mean every one of us knows hopefully By now, what a skill is, it's basically really a folder with a skills MD file in it and then some additional assets to make that skill really work. And the big difference with skills is that they work on progressive disclosure. So most of the skills start very small. So you have the title and the description. The description is normally part of the model's context, so the model knows when to use the skill. Second layer is we have a skills body with more instructions, more details, and hopefully more references to external files, and then you can really go deep in those reference files where there's all of the context the model needs to discover to solve the task. And I like to differentiate between two kinds of skills. So there are capability skills and preference skills. Capability skills teach models something they cannot do consistently at the moment. Maybe it's like, I don't know, like tracing some logs, creating a new React app. and those capability skills are temporary so the better our model gets the more likely it is that we can remove those skills and evals will tell us when we can retire skill and when not and then we have preference skills those are more durable mostly in code some preferences so if you have a specific workflow in your team or a specific style language or other preferences which are very specific to your company you will have or create preference skills and those preference skills are then protected with evals well because most of like the foundation models, might not integrate the knowledge which is very specific to your use case or your domain. And preference skills are very valuable, so we really want to make sure that those are working and we don't update our agents to degradate performance. So do skills work? Yes, they do work. Going back to SkillsBench, which has an update of 1.1, which has evaluated all kinds of open and closed models in different harnesses, showing that Skills, on average, improved the performance by roughly 15%. SkillsBench covers around 100 different tasks based on coding and also productivity across different languages. It's openly available. They have a very nice website, a very nice leaderboard, are also very open for community contributions. And they did a second analysis on self-generated or AI-generated skills. It's very easy if you are in a coding agent and you work on something, tell the model, create a skill. And then it writes a skill MD file. We maybe look at it very closely. It roughly covers what we want to do. And then we just accept it and start using it. And what I found out is that human-written skills are the best we can provide. AI-generated skills can impact performance negatively. And that skills or skills.md files should be below 500 lines of words. So if you have your laptop open and have a skill available, if you open that and if it's above 500 lines, you should definitely look at the skill after our session. And the last topic about what is a skill and how a skill works. We have different ways of triggering our skill, right? We can have a model-triggered skill, meaning based on the context and the description, the model decides to use or read a skill to get more context to solve a task. And then there are user-invoked skills. And I think people underestimate how powerful user-invoked skills are. And they, most of the time, just accept the overhead by adding it into the context. user-invoked skills for more workflow type of tasks, like creating a pull request, staging documentation, and all of the very normal dev work, which could be run in a script, should most likely be a user-invoked skill. And when you build agents for a customer, you don't have those user-invoked skills. We are only working in the model-invoked skills, and that's where we are focusing on for the small eval section we are going to look in a second. Writing skills is an important topic. We're going to look at eight examples or tips on how you can write good skills. And most importantly, if you work with model-involved skills, is the description. Because the description are, most of the time, two sentences we provide to the system instruction to help the model know when it should use a skill or not. And it's bad if you're description is too vague because then it might trigger too often or it might not be triggered if you need it. So very important is the why and the how for the model. So why it should use that skill and then how it should use that skill. Very common is like use that skill if you are working on a React application, for example. And then, of course, the when. And we should write directives instead of essays. So we should not say something like, hey, The Interactions API is recommended for multichat because it handles session state, and you should be way more directive. Use the Interactions API if you're working on a chat application. So you need to give the model clear instructions and directives on when it should use the skill and how it should use the skill. Similar to what we have seen in the skills bench results, we should keep the skill lean and layer information. So the description is the cost you always pay on every model invocation. So on every model call, the description is part of the model context. So you always pay that 100, 200 tokens cost. And you don't want to have a super long description because then you always have to pay that. When you have a very long skill MD file, it will be always read into context when the model decides to read the skill or to use the skill. which can be expensive as well. That's why we want to keep it as concise as possible, but still include all of the reference and details for the model to solve that task. And then, of course, the layer 3 is like, we can have those reference files where the model needs to, like, go really deep into a very specific task. And a good example for this is if you are working in maybe a multi-cloud environment and you have a skill to deploy your application, you might need instruction to deploying to AWS and deploying to Google Cloud. Those should not be part of your skill in the file. Those should be references, that you have a reference for AWS, a reference for Google Cloud, maybe a reference for Azure, so that the model can basically explore based on the context where it should go to get all of that information. then we should set the right level of freedom. I see many people very clearly describing the exact workflow in a skill. Step one, go there. Step two, do this. Step three, do this. If you have those type of use cases, you should not use skills. Maybe you should write a script, because if the process or the workflow is always the same, you don't need to waste models and tokens for that exercise. You can create a script. You can tell the model, use that script to run a specific workflow. rather define goals and constraints. So if you need to deploy or update or stage your documentation, describe how the model can do that. Or for your database, updating a config, you should not say, read the config, update the port, and then deploy again. The model knows what to do. Just like, hey, if we need to change the config, here's the file. Make the change. Then don't skip negative cases. So we always look at the when we want to use the skill, but most of the time we don't look at when we don't want to use the skill. So if we have a description for our skill which says use it for web development tasks, it might over-trigger. Maybe you'll work with React, maybe you will also work with Angular, and the model always loads the skill if you're working in a web development environment. But if you are very specific for like, hey, only use that skill for React components or for tail in CSS, then the model knows, hey, that's very specific for one to use. And with evals, we can also identify those. And then test early. So that's what we are going to look at. We should really try to test when you create a new skill, always 3i to create 10 of 20 prompts. I like to create five for the happy path. So when do I want to use that skill? 5 when I don't want to use that skill, just to make sure the model is not over-triggering the skill and confusing itself. And then if you have already some customer or production traces, try to include those as well, because nothing is better than real-world data. And then tip seven, which is quite new, and I have to give all credits to Matt. So if you don't know Matt, it's a great AI educator, and you should definitely follow him. He published a tweet and also a skill on killing all of the non-ops. And what he found is that AI-generated skills tend to include a lot of no-ops. And no-ops basically is an instruction which does nothing to change the agent's behavior. It's like B4O, make an implementation easy to read. Like the model knows. how or when it should make something easy to read or write clear, high-quality code. I mean, that's what we expect from the model to do without telling it, really. So definitely look at those no-ops. He has published a very good skill in his skills repository. And then, last but not least, know when you should retire a skill. Skills are not... dare to live forever. Models get better, behaviors change, expectation change, the environment changes. So always try to run evals with and without the skill enabled. And if the model achieves the performance without even triggering the skill, you know you can retire that skill, save the cost for your tokens, and then also don't keep it redundant. So save cost at the end and maintenance also as well. And to look at a little bit of a practical example and also how you can create your own small eval or eval harness for skills, earlier this year, we wanted to create a new skill for the Gemini Interactions API. So the Gemini Interactions API is our new interface for working with Gemini models and with agents. And the Interactions API was released after the last training of Gemini. So the model or Gemini 3 in 3.1 or even 3.5 has no context about what is the Gemini Interactions API. So we decided, OK, let's look at creating a skill to help the model create good code for the Interactions API to use the latest models. And to do that, we created 117 test cases. Those are based on data we see from real users trying to generate Gemini code, from synthetic-generated test cases, and also from feedback. We see people like, hey, the model is using Gemini. 2.0, even if we are already on 3.0. And the end result was that we improved the performance up to almost 90% for generating valid interactions API code with the latest Gemini models. And to do this, we basically only needed two very simple assets. So one of that was a JSON file with all of our test cases. like no clear structure. It's like, hey, we have a prompt. That's basically what we expect the user to provide. We have a language because we wanted to test the skill against TypeScript and Python. We have a should trigger that's basically there to tell us if the agent should read the skill or not read the skill. And then we have different expected checks. We look at them in a little bit. Those are basically very simple asserts. for that prompt, if it should trigger or not. And then we have a very basic Python script, which runs a coding agent. In this case, it was the Gemini CLI, which passes the output and returns it. So we can take a look at the outcome, whether we have valid code for the Interactions API or not. And most of the tests or evals for skills can be regex. It's very amazing how good of regex you can write using coding agents. And it's really, for us, it was all about, OK, do we use the correct SDK? Do we use the correct model? Do we use the correct methods? Do we use any old patterns? And we created very basic asserts for all of those cases, which are very cheap to run. So we can run our skill against evals many times. So if a new model releases, we have a very easy way to update those asserts to the latest model IDs. And it's very cheap. to run for it well because we don't need to use like LLM as a judge but of course you can use LLM as a judge if you have like more complex skills which need to look at the whole traces or the whole steps taken and a very easy case it's like you just create LLM as a judge with a rubric on like what you want to look at and then like take the output put it through the LLM as a judge try to get a pass or a fail and then if it fails look at the data and then try to improve your skill based on that. And that's also how we now eval skills at Google DeepMind. So we don't use YAML, but it's just as an example. We have tests or evals alongside every skill we have internally at Google DeepMind. um every test has multiple cases with like a prompt we all run them in like clear workspaces so you can define your workspace or environment if it should include additional files like your application environments you have startup commands which basically preloads or installs libraries into the environment and then you have script validators those are those red checks where we look at all of the traces to see was the skill triggered was a certain command run was a certain cli run and then we also have llm as a touch where we have some expectations which are basically matched against like hey did it trigger the skill did it run a certain bash command to like also evaluate it and we run them on every change to the skill so if a change happens to or like a diff to the skill file the eval will be run, and there will also be a result, and the change will not be merged if it is not improving the test cases. So we always have those regression tests for every change to the skill, and you can only change the skill if it improves the eval or add new evals. And yeah, that's how we basically manage it. And then last but not least, 10. Examples for best practices for skills. You don't need to take photos. They are in the blog post. I can share later. So I mean, we had it many, many times. The skill description is very important. We have seen 50% of the failures because the skill was not triggered correctly because the prompt of the user was not detailed enough for the model to understand, hey, I need to use that skill to solve the task. And especially if you build agents for others, they are not aware of the skill descriptions you have for your model and for your skills. So they might write something very shallow, and then the model needs to know. OK, I need to trigger that skill. We should write directives over passive information. So we should always think about it. You should tell the agent what to do or not what to do and not just like, hey, if you feel happy today, please use the skill. Include negative tests. We always forget negative tests. Start small. Even like 10 to 20 skill eval samples are better than nothing. You will be surprised on how much you will find even from like 5 to 10 examples. And then definitely create outcomes, not paths. We don't want to test if the model loads the skill on the first turn. We really want to test if it can achieve the task based on the prompt. And if it loads the skill, it loads the skill. If not, then not. If it loads the skill after five turns, that's also OK. Then we want to have isolated runs because coding agents are very good at finding or cheating. So if you run inside your existing environment, it might look up previous chats, or it might look up some other executions, and then try to cheat it and get the context from the skill without even using the skill. Then definitely run more than one trial when running evals. Like agents, our models are non-deterministic. Maybe the first run works. The second one doesn't. So always run. Three to six trials per case and to measure reliability test across different harnesses if you work with like or if you have employees or People working with like different harnesses not only just evaluate against code code or anti-gravity if you have people working with cursor try to include them as well because Agent harnesses behave differently. And of course, model behaves differently. So maybe your skill is very good with a Gemini, but very bad with Codex. And then you have customers, consumers using your harness with Codex, and then it fails. And then create your evals. So if your model is good enough, it doesn't need the skill anymore. Keep that eval. You don't need to throw that eval away because you throw the skill away. You can keep that eval to make sure that the model or the agent keeps the performance. And as soon as you start seeing some degradation, you can reintroduce a skill. You can maybe tweak some other tools or pieces to keep the performance up and then really detect when you can retire your skill. And you will be very surprised with all of the model updates how fast you can retire your skill, which you might need it like six months ago, but not today anymore. I have some homework for you. So if you are back from holiday on Monday, pick the most used skill and write five test prompts. You can also use your coding agent and ask it to see, look at your trajectories, which are my most used skills, and then try to create some skills. As you have seen, it's very easy to write your eval harness. It's like a JSON or YAML file, and then some Python script which runs your coding agent or your agent harness, and then look at the outcome. Try to look at removing no ops. Maybe it does not change the eval performance, but it helps you save costs because all of the tokens which are not helpful or not changing the agent behavior are money you will spend. So look at writing create skills from Matt. You can find it on GitHub. And then also run ablation tests. So run always evals with your skill loaded and without your skill loaded. Only that way you will know when you can retire a skill or if a skill is really helpful for your performance. So don't ship skills without evals. Thank you.

There are thousands of agent skills. Almost none of them are tested. They get vibe-checked with two manual runs, maybe a thumbs-up from a colleague, then shipped. You wouldn't merge code without tests — so why are we shipping skills without evals? This talk covers the full lifecycle of building reliable agent skills: what a skill actually is (and isn't), how to write one that triggers correctly, and how to build a lightweight eval harness that catches failures before your users do.

### Philipp Schmid
Staff Engineer · Google DeepMind
[X/Twitter](https://x.com/_philschmid) · [LinkedIn](https://www.linkedin.com/in/philipp-schmid-a6a2bb196/) · [Website](https://www.philschmid.de/) · [Blog](https://www.philschmid.de)

Philipp Schmid is a Staff Engineer at Google DeepMind working on Gemini and Gemma. His work focuses on helping developers build and benefit from AI responsibly.

## About This Session

— [View on the schedule](https://www.ai.engineer/worldsfair/schedule?session=asn_slot_2026_07_01_breakout_track_05_1545_2026_06_26t08_57_00_975z)