ai-writing-detector

name	ai-writing-detector
description	Use when the user asks to detect, scan, audit, score, or flag AI-writing patterns without rewriting the text, including requests for a deterministic local detector result when the host can execute Node.

AI Writing Detector

Run a detect-only review using the original Avoid AI Writing rules. Never rewrite unless the user changes the request.

Authority

The canonical rulebook is ../avoid-ai-writing/SKILL.md. Its cautions about false positives, context, protected material, and authorship claims apply here.

For cross-Skill work, follow ../avoid-ai-writing-router/references/handoff-contract.md and the typed edges in ../avoid-ai-writing-router/references/skill-graph.json.

Connection contract

Incoming

Accept detector work from:

• avoid-ai-writing-router via ROUTE for detect-only requests, the audit stage of a multi-stage request, or fresh signal collection after another terminal stage returns control to the router.
• preservation-verifier via bounded RECHECK only when convergence or residual auditing was part of the request.

Do not accept a direct handoff from false-positive-reviewer. That Skill is terminal in the graph and must return control to avoid-ai-writing-router when fresh signal collection is needed. This prevents a reviewer-detector cycle.

Carry forward the existing context_mode, protected constraints, pass state, and risk flags. Do not reset them.

Produce

Update the handoff envelope with:

• execution_evidence.detector: executed only if the bundled detector actually ran, otherwise model_only.
• detector_summary.score and label only when produced by executed detector code.
• detector_summary.issue_types from actual findings.
• any consequential_authorship_claim risk flag observed in the user's request.

Outgoing

• FEED findings to voice-preserving-rewriter only when the user also requested returned-text rewriting.
• FEED findings to file-edit-in-place only when the user explicitly requested mutation of a named file.
• ESCALATE to false-positive-reviewer when the user asks what the findings can establish about authorship or another consequential conclusion.
• Otherwise stop after the detect-only result.

Detector findings are evidence inputs. They are not mandatory edit instructions and they never authorize a mutation.

AI-engineering evidence lens

Apply the agency-ai-engineer lens encoded in ../avoid-ai-writing-router/references/agency-role-lenses.md:

• keep deterministic output separate from model-only observations,
• preserve the selected context mode through downstream handoffs,
• treat score and label as signals rather than ground truth,
• consider false positives and genre/register effects,
• never convert pattern detection into an authorship classifier claim.

Preferred path

When the current host can execute Node safely:

1. Pass the supplied text to scripts/detect.js.
2. Use --context technical for code-adjacent or technical prose when appropriate. Otherwise use general.
3. Report the detector's score, label, issue types, severity, matched text, and suggestions.
4. Separate deterministic findings from editorial observations that only exist in the full rulebook.
5. Never claim execution unless the command actually ran.

Example:

printf '%s' "$TEXT" | node scripts/detect.js --context general

For a file:

node scripts/detect.js --file path/to/draft.md --context general

If Node or shell execution is unavailable, perform the detect-only workflow from the canonical avoid-ai-writing Skill and explicitly say the deterministic detector was not run.

Stop conditions

Stop here when the request is detect-only. Do not continue into rewrite, file mutation, or interpretation merely because those Skills are available.

A residual RECHECK may run once. Respect the canonical two-pass limit and the graph's loop policy.

Output

Return the overall label and score when executed, detected patterns grouped by severity, a short contextual assessment of clear issues versus plausible false positives, execution status, and no rewritten version unless control has explicitly passed to a rewrite owner.