skills/nisan-et-al-2007-algorithmic-game-theory/SKILL.md
Comprehensive treatment of algorithmic game theory covering mechanism design, auctions, and equilibrium computation
npx skillsauth add curiositech/windags-skills nisan-et-al-2007-algorithmic-game-theoryInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
Name: Algorithmic Game Theory
Author: Noam Nisan, Tim Roughgarden, Éva Tardos, Vijay V. Vazirani (editors)
Maintainer: Claude Code Skill Library
Version: 1.0
Tags: #game-theory #mechanism-design #multi-agent-systems #incentive-design #computational-complexity
This skill provides frameworks for designing computational systems where self-interested agents make strategic decisions. It integrates game theory and algorithm design to solve the dual challenge: creating systems that are both computationally efficient and strategically robust. Use when building systems with multiple decision-makers whose incentives may not naturally align with system goals.
Calculate Price of Anarchy (PoA) for your domain:
├── PoA ≤ 2
│ ├── System loses <50% efficiency from strategic behavior
│ └── → Allow decentralized control
├── 2 < PoA ≤ 10
│ ├── Moderate inefficiency, check implementation costs
│ └── → Consider mechanism intervention (taxes, tolls)
└── PoA > 10 or unbounded
├── Strategic behavior destroys system value
└── → Require centralized allocation or strong mechanisms
Can you compute optimal allocation efficiently?
├── YES: Optimal allocation is polynomial-time
│ ├── Budget deficits acceptable?
│ │ ├── YES → Use VCG mechanism (dominant strategy truthful)
│ │ └── NO → Use proportional allocation (4/3-approximation + budget balance)
│ └── Private information has structure?
│ ├── Gross substitutes → Use ascending auction
│ └── General valuations → Check approximation algorithms
└── NO: Optimal allocation is NP-hard
├── Good approximation algorithm exists?
│ ├── YES + algorithm preserves monotonicity → Approximate VCG
│ └── NO → Use Bayesian mechanisms with known priors
└── Need budget balance → Relax to ex-post individually rational
What learning algorithm do agents use?
├── Regret minimization (multiplicative weights, follow-the-leader)
│ └── → Converges to correlated equilibrium in O(log n / ε²) rounds
├── Best response dynamics
│ ├── Game has potential function?
│ │ ├── YES → Converges to pure Nash
│ │ └── NO → May cycle indefinitely
│ └── Game is zero-sum → Converges to mixed Nash
├── Gradient-based learning
│ ├── Payoffs are concave?
│ │ ├── YES → Converges to Nash
│ │ └── NO → Check if game is stable (eigenvalues)
│ └── Network topology matters
│ ├── Tree structure → TreeNash algorithm (polynomial time)
│ └── General graph → PPAD-hard
└── No learning structure specified
└── → Nash computation is PPAD-complete, use approximate equilibrium
Identify attack vector:
├── Cheap identity creation possible?
│ ├── YES: Require costly signaling
│ │ ├── Proof-of-stake (economic cost)
│ │ ├── Proof-of-work (computational cost)
│ │ └── Identity verification (administrative cost)
│ └── NO: Can rely on natural identity scarcity
├── Trust is transitive (friend-of-friend)?
│ ├── YES → Use graph-based reputation (PageRank, hitting time)
│ └── NO → Use direct interaction history only
└── Whitewashing possible (restart with clean identity)?
├── YES → Require long-term identity investment
└── NO → Standard reputation accumulation works
What type of information are you aggregating?
├── Probability estimates
│ ├── Single event → Use proper scoring rules (logarithmic, quadratic)
│ └── Conditional probabilities → Market scoring rules (LMSR)
├── Binary signals (yes/no votes)
│ ├── Simple majority needed → Always market-computable
│ └── Complex threshold → Check if market-computable
│ ├── Weighted majority → Market-computable
│ └── XOR, parity → NOT market-computable
├── Expert predictions with different quality
│ ├── Track record available → Weight by historical accuracy
│ └── No history → Sequential reporting (experts condition on previous)
└── Strategic experts may coordinate
└── → Use scoring rules + randomization to prevent manipulation
Symptom: "Nash theorem guarantees equilibrium exists, so our multi-agent system will find it"
Diagnosis: Confusing existence with computability
Detection Rule: If you're assuming agents will "find" Nash equilibrium without specifying a polynomial-time algorithm
Fix: Use correlated equilibrium (polynomial-time via regret minimization) or approximate Nash with convergence guarantees
Symptom: System computes optimal allocation but agents lie about preferences, causing poor outcomes
Diagnosis: Ignoring strategic behavior when designing algorithms
Detection Rule: If your mechanism asks for private information but doesn't specify why truth-telling is optimal
Fix: Use VCG payments (charge externality) or design allocation rule to be monotone + incentive-compatible
Symptom: VCG mechanism runs budget deficits; system financially unsustainable
Diagnosis: Assuming theoretical mechanisms work without resource constraints
Detection Rule: If mechanism payments sum to negative (subsidizing participants)
Fix: Use proportional allocation, core-based mechanisms, or accept approximate efficiency for budget balance
Symptom: Network performance degrades unexpectedly; agents find exploits through graph structure
Diagnosis: Treating network topology as purely technical choice, ignoring strategic implications
Detection Rule: If equilibrium analysis doesn't account for graph structure effects on agent payoffs
Fix: Design topology jointly with incentives; use bounded-degree graphs for tractability, tree structure for exact solutions
Symptom: Reputation system overwhelmed by fake accounts; honest users' influence diluted
Diagnosis: Building reputation without identity costs
Detection Rule: If reputation system has no barriers to creating new identities
Fix: Require proof-of-stake, proof-of-work, or administrative identity verification; make identity persistent and costly
Scenario: Design rate limiting for an API where users have different urgency levels for requests, but you can't directly observe urgency.
Step 1 - Decision Point Navigation: Can we compute optimal allocation efficiently?
Step 2 - Mechanism Design:
Step 3 - Failure Mode Check:
Expert vs Novice:
Scenario: Multiple services share a distributed cache. Cache hits reduce database load (shared benefit), but cache maintenance has costs. How do we allocate costs fairly?
Step 1 - Convergence Analysis: Will cost-sharing reach equilibrium?
Step 2 - Mechanism Selection:
Step 3 - Implementation Reality Check:
Expert vs Novice:
Do NOT use this skill for:
Delegate to other skills:
This skill applies when agents are strategic AND their choices affect system outcomes AND you cannot simply command compliance.
tools
Building resilient distributed systems with circuit breakers, retries with full-jitter exponential backoff, retry budgets (per-request 3-attempt + per-client 10% ratio per Google SRE), deadline propagation, and the cascading-failure math (4 layers × 3 retries = 64x amplification). Grounded in Resilience4j, Microsoft Cloud Patterns, AWS Architecture Blog (Marc Brooker), and Google SRE Book.
testing
Designing HTTP cache headers that work correctly across browsers, CDNs, and shared proxies — `Cache-Control` directives per RFC 9111, `stale-while-revalidate` and `stale-if-error` per RFC 5861, the Vary header for varying responses, and surrogate keys for tag-based purging. Grounded in IETF RFCs and Cloudflare/Fastly docs.
development
Use when designing or fixing a Content Security Policy on a real site, choosing between nonce-based and hash-based CSP, adding strict-dynamic, debugging "Refused to execute inline script" errors, deploying CSP in report-only mode first, configuring report-to / report-uri, or auditing an existing policy for unsafe-inline / unsafe-eval / wildcards. Triggers: "CSP blocks legitimate inline script", strict-dynamic, nonce-{RANDOM}, sha256-{HASH}, object-src none, base-uri none, frame-ancestors, Trusted Types, X-Content-Security-Policy obsolete, report-only vs enforced. NOT for general HTTP security headers (HSTS, COOP/COEP), Trusted Types deep dive, CORS configuration, or building a WAF.
tools
Choosing and operating an HTTP API versioning strategy that doesn't break clients — Stripe's date-based pinned versions, the Deprecation/Sunset header pair (RFC 9745 + RFC 8594), URI vs header vs media-type approaches, and the version-transformer pattern. Grounded in Stripe's published architecture and IETF RFCs.