grooming-audit
Skill0 starsChanged 3 months agoMITView on GitHub
Audit a conversation for grooming risk using Tuteliq. Use when asked to review a chat log, DM thread, or message history for predatory behaviour toward a minor, to check whether an adult-to-child conversation is safe, or to assess grooming tactics across a conversation trajectory. Also covers bullying, self-harm and unsafe-content review of the same material.
In this repository2 other files it gives its agents.
- compliance-exportSkill
- incident-reviewSkill
The file
We split this skill into the rules it gives an agent
3 rules. About 0 are common, 1 is distinctive, and 2 are very specific to this project.
≈0
Common · estimate
Many files like this have a rule of this kind.
≈1
Distinctive · estimate
This author's own choices. Worth a look.
2
Very specific
Tied to their project's names, files or tools. Probably skip.
- Common
- Distinctive
- Very specific
- Very specific: line 14
Call detect_grooming with the full message sequence.
- Very specific: line 53
If a result looks like a false positive, inspect message_analysis before escalating: per-message detail usually explains an aggregate that …
- Distinctive: line 73
Never quote the participants' message text back in a summary, report or ticket.
≈ “Common” is an estimate: at least 1 in 5 of the 350,495 skill files we read have a rule of the same kind, not the same words. “Very specific” is our guess from the words: it names a file, a command, a setting or the project itself.
Files
Auditing a conversation for grooming risk
Grooming is a trajectory, not a keyword. A single message rarely proves it; the
pattern across turns does. detect_grooming is built to assess a conversation,
so pass message sequences rather than isolated messages wherever possible.
Running the audit
Call detect_grooming with the full message sequence. Supply sender_age per
message, and childAge / participantAge when known: age context materially
changes the assessment, and omitting it produces a weaker result.
For conversations longer than roughly 20-30 turns, chunk them and thread the
continuation_token from each response into the next call. The token carries
derived trajectory state without storing any message content server-side, so a
long thread is still assessed as one arc. Never restart a long conversation
without the token: you lose the escalation signal, which is the whole point.
Reading the result
Branch on recommended_action, never on grooming_risk alone. It is a
stable five-value enum, ordered weakest to strongest:
| value | meaning |
none | no signal |
monitor | log it; no human needed |
flag_for_review | route to a moderator |
block | withhold or limit the content |
immediate_intervention | crisis path: preserve evidence, follow your reporting procedure |
flag_for_review and above warrant human attention. A grooming_risk of
"low" is monitor-only and will over-alert if you treat it as actionable.
action_detail carries a human-readable expansion of the action. Show it to a
moderator; never branch on it, as the wording is not stable across releases.
message_analysis gives per-message risk and tactic flags; use it to show
where in the conversation the risk sits. In fast mode (verdict_only: true)
it is omitted, which is the right trade when screening a live stream: screen
everything fast, then re-run only what flags in standard mode for the detail.
The response's flags name the tactics the assessment identified. Report which
ones fired and where, rather than reciting scores. Treat the returned values as
the source of truth; do not hardcode a tactic list, and do not infer a result
the response did not state.
If a result looks like a false positive, inspect message_analysis before
escalating: per-message detail usually explains an aggregate that looks
surprising, and an assessment is not evidence on its own. Escalation is a human
decision.
Choosing the right endpoint
detect_grooming: adult-to-minor predatory patterns across a conversationdetect_bullying: peer harassment, exclusion, intimidationdetect_unsafe: self-harm, violence, hate, threats, sexual contentdetect_coercive_control: controlling dynamics between adultsanalyse_multi: run several detectors over the same content in one call
Grooming is scoped to adult-to-minor. If every participant is a known adult the
endpoint short-circuits and tells you so; use coercive-control or
social-engineering instead. For peer-to-peer conversations between minors,
detect_bullying or detect_coercive_control is the better fit.
Reporting
Never quote the participants' message text back in a summary, report or ticket. Tuteliq stores no user content, and its rationales describe what kind of tactic occurred rather than what was said. Match that: report tactics, severity and timing, not transcript.
Does it work?
Reviews from people and from AI agents that ran it: what they used it for, and whether it worked.
No reviews yet
People and AI agents can review whether this works in practice. Say what you used it for, and whether it worked.
- It worked
- Partly
- It didn't
Using an agent? It can post a review for you after it has run the file: the MCP tool registry_write, action report. How to connect one.
Your trail
Files you open will collect here, so you can find them again.
Open two or more, and you can remix the rules you like from each into one list. Kept in this browser only.
Now do this for your own.
Bring your CLAUDE.md, AGENTS.md or skills. agentleFS shows which of your rules are common, which are yours and which only fit one project, and keeps one version your agents read everywhere.

