Agent skill · Testing & QA

gating-deid-leakage

Add a CI gate that fails the build when an OpenMed de-identification model's recall on a held-out PHI set drops below threshold or any critical identifier leaks. Use when the user wants a pytest test or CLI step that exits nonzero on de-id regression, wants to wire OpenMed's leakage-first release gates into GitHub Actions / CI, needs a recall floor plus zero-leakage assertion against a synthetic held-out set, or wants to block merges that weaken de-identification. Trigger on \"CI gate\", \"fail the build\", \"regression test\", \"de-id recall threshold\", \"block the merge\", \"exit nonzero\",

maziyarpanahigithub.com/maziyarpanahiGitHub ↗
claude-codeApache-2.0
Install
npx skills add maziyarpanahi/openmed --skill gating-deid-leakage --agent claude-code

Same command for any agent — swap --agent for codex, cursor, copilot.

Facts
Files in the skill folder: 1
SKILL.md size: 7 KB
Bundled scripts: none
Version: 1.0
Path: skills/gating-deid-leakage/SKILL.md
Open the folder on GitHub →
Where it comes from
Stars: 4,851
Language: Python
Read our review of the source →

Weekly change comes from our own snapshots, not the repository page — it measures attention, not adoption.

From the SKILL.md

# Gating De-id Leakage in CI Logs, baselines, and models drift. The only durable defense is a gate that runs on every change and **fails closed** when de-identification regresses. This skill operationalizes OpenMed's leakage-first ethos into a CI check: recall must stay above the floor and **critical leakage must be exactly zero**, or the build goes red. ## When to use this skill - You want a pytest test or CLI step that exits nonzero on de-id regression. - You need to block PRs that drop PHI recall or introduce a leak. - You want OpenMed's release gates (`ReleaseGate`, G1a–G8) enforced in CI. - You maintain a synthetic held-out PHI set and want it checked automatically. For the full gate semantics see `evaluating-with-leakage-gates`; this skill is about *wiring it into CI so it fails the build*. ## Quick start — a pytest gate ```python # tests/eval/test_deid_leakage_gate.py import pytest from openmed.eval import run_suite, ReleaseGate, RELEASABLE RECALL_FLOOR = 0.99 # direct-identifier recall floor HELD_OUT = "eval/heldout/phi_synthetic.json" # SYNTHETIC, committed @pytest.fixture(scope="module") def gate_report(): report = run_suite( HELD_OUT, suite="golden", model_name="OpenMed/

What's inside
Steps it walks through
  1. When to use this skill
  2. Quick start — a pytest gate
  3. Quick start — a CLI gate
  4. Wire it into GitHub Actions
  5. Workflow
  6. Hand-off to / from OpenMed
  7. Edge cases & gotchas
  8. Standards & references
Commands it runs
Produce a candidate report, then gate it. Nonzero exit blocks the job.
python -m openmed.eval.release_gates \
More from openmed
All skills →
About this skill
What does the gating-deid-leakage skill do?

Add a CI gate that fails the build when an OpenMed de-identification model's recall on a held-out PHI set drops below threshold or any critical identifier leaks. Use when the user wants a pytest test or CLI step that exits nonzero on de-id regression, wants to wire OpenMed's leakage-first release gates into GitHub Actions / CI, needs a recall floor plus zero-leakage assertion against a synthetic held-out set, or wants to block merges that weaken de-identification. Trigger on \"CI gate\", \"fail the build\", \"regression test\", \"de-id recall threshold\", \"block the merge\", \"exit nonzero\",

How do I install it?

Run `npx skills add maziyarpanahi/openmed --skill gating-deid-leakage --agent claude-code` — it drops the skill into your project so the agent can pick it up. Swap the --agent value for codex, cursor or copilot if you use one of those.

Where does this skill come from?

From maziyarpanahi/openmed, a repository with 4,851 stars. We read it straight from the repository tree rather than a submitted listing, so what you see here is what is actually published.

Is a popular skill a good skill?

Not necessarily. Stars measure attention, not adoption — a repository can trend for a week and be abandoned. That is why we show the weekly change from our own snapshots next to the total, instead of a single flattering number.

Keep going