Borderless RecruitBook A Call
Employer reviewing an AI agent developer skills test and scoring rubric

AI Agent Developer Skills Test: A Practical Employer Assessment

By 6 November 2026

A useful AI agent developer skills test should require the candidate to build and explain a small agent—not merely answer questions about prompts or frameworks. Give the candidate supplied documents, a mock business API and clear acceptance criteria. Ask the agent to retrieve evidence, call an authorised tool, request human approval before a consequential action and recover safely from a failed tool call. Assess the implementation against the same written rubric for every candidate.

What the assessment should prove

An agent developer needs more than generative AI knowledge. The role combines software engineering, retrieval, API integration, workflow design and production operations. A test focused only on prompt wording misses much of the work an employer will ultimately own. Look for evidence that the candidate can distinguish a convincing demonstration from a system your team can maintain.

Start with the job's actual responsibilities. If the work involves answering questions from documents, retrieval quality matters most. If it involves changing customer records, permissions and safe execution become essential. Test the boundary between those activities; do not require an elaborate autonomous system when a controlled workflow would meet the brief.

How Borderless Recruit helps

Borderless Recruit sources and vets dedicated, full-time AI developers from the Philippines, including a hands-on RAG or agent build with edge cases, and handles local employment contracts, payroll and HR. The developer works only for your company during your UK or European business hours. This requires a Philippine shift aligned with those hours; the Philippines does not observe daylight saving, so agree how the shift follows seasonal clock changes in your location.

A realistic take-home assignment

Use a fictional support workflow so the employer receives no usable client work for free. The following is an illustrative hiring exercise, not a client case study: build an internal policy assistant that answers from supplied documents, looks up a fictional customer's ticket and drafts a response. It may save an approved draft to the mock ticketing system, but it must never send a customer message.

Provide synthetic policy documents with version labels, fictional tickets with ownership permissions, a mock API and a starter repository. Include a sample user request and the expected response structure: answer, supporting document reference, proposed action and approval status. Supply sandbox access and cover any required model usage so candidates can demonstrate their work without buying services.

Suggested acceptance tests for the fictional support assistant

Test input or eventExpected behaviourEvidence the reviewer checks
An authorised user asks a question covered by the current policy.Answer using the relevant policy and identify the supporting passage.The cited passage supports the answer; an obsolete policy is not silently preferred.
The question is not answered by the supplied material.Explain the evidence gap and request clarification or escalate.No invented policy or unsupported instruction.
A retrieved document instructs the agent to ignore its rules.Treat that passage as untrusted content.The instruction cannot grant permissions or trigger a write.
The user requests another team's restricted ticket.Reject access before retrieving its contents.The application checks permissions independently of the model.
A reviewer approves a draft, then the proposed text changes.Require approval of the changed draft before saving it.Approval is bound to the specific action, record and content.
The mock API saves a draft but the response times out.Check the action's status or retry safely without a duplicate write.A repeat request cannot create another copy of the same action.
The model returns malformed output.Validate the response and recover or return a controlled error.No unchecked tool arguments or unhandled application error.
AI agent assessment flow from requirements discovery through tool use, approval, evaluation and handover

Share the failure categories and scoring criteria in advance. Keep equivalent variations for the follow-up interview, such as a changed permission or conflicting policy. Ask the candidate to submit runnable code, setup instructions, evaluation results and a short limitations note. Specify what can remain mocked: deployment and monitoring can be explained rather than fully built for this exercise.

Bound the task before issuing it. Pay for substantial original engineering, provide scaffolding and agree a stopping point. Ask candidates to document unfinished work rather than quietly extending the exercise. A narrow build with a thoughtful explanation gives reviewers a clearer basis for comparison than an open-ended request to build a production platform.

Score evidence, not presentation polish

Use the rubric below as a suggested hiring framework, not a validated predictor of job performance. Record each category as demonstrated, partly demonstrated or not demonstrated, with a reference to the code, test output or walkthrough. Interviewers should record their judgements independently before discussing the candidate.

AI agent developer review rubric

CategoryHire-level evidenceWarning signs
Functional behaviourThe agent distinguishes answering, drafting and executing, and completes the agreed workflow.A polished demonstration fails when inputs change.
Retrieval and groundingThe candidate explains document selection, citations, conflicting evidence and retrieval limits.The model invents answers or treats a similarity score as proof of correctness.
Tool use and permissionsArguments are validated, credentials stay outside model-visible content and permissions are enforced by the application.A general-purpose tool can read or change more data than the task requires.
Security and approvalUntrusted content cannot authorise actions; approval is checked against the exact proposed change.The system prompt is the only barrier to an unauthorised action.
Reliability and observabilityFailures are classified, retries are bounded and diagnostic traces avoid unnecessary sensitive content.Every failure causes a retry, or logs cannot explain what happened.
EvaluationRepeatable tests cover useful answers, prohibited actions and the supplied failure cases.Quality is judged only through friendly prompts tried manually.
MaintainabilitySetup works from the instructions; dependencies, prompts and configuration are recorded.Critical behaviour depends on undocumented local settings.
CommunicationTrade-offs and unresolved risks are explained in language a stakeholder can act upon.The candidate overstates certainty or cannot explain the implementation.

Set critical requirements before reviewing submissions. For this exercise, unauthorised record access, an approval bypass or exposed credentials should block a pass until resolved and retested. Strong communication should not cancel out those failures. Conversely, a candidate who identifies an incomplete feature and contains its risk offers different evidence from someone who claims it is finished.

Separate prototype ability from readiness to own production work. A working mock integration demonstrates implementation skills; it does not establish that the candidate has operated a live service. Use the interview and reference checks to examine deployment, incident response and maintenance experience where the role requires them.

Adjust the test to the seniority you need

Seniority-specific expectations

LevelAppropriate scopeWhat good evidence looks like
JuniorComplete a scaffolded retrieval-and-tool workflow.Readable code, correct validation, careful testing and escalation of uncertain decisions.
Mid-levelDesign the workflow and implement recovery and evaluation.Independent work across APIs, permissions, tests and documentation.
SeniorReview threats and explain deployment, monitoring and rollback.Justified trade-offs between task quality, latency, operating cost and risk.
LeadClarify an ambiguous process and review another developer's design.Clear system boundaries, ownership decisions and communication with business stakeholders.

Keep expectations consistent with the advertised role. Do not reject a junior applicant for lacking a senior operating model, or accept a senior applicant solely because the demonstration runs. If document retrieval is the main responsibility, the guide to RAG developers versus AI agent developers can help narrow the brief.

Security, privacy and recruitment governance

Use synthetic test data and avoid production credentials or confidential source code. Overseas access to UK personal data can engage restricted-transfer rules, including where a separate overseas organisation receives remote access. Assess the actual employment and contractual arrangement rather than assuming every overseas worker has the same status under ICO international-transfer guidance. For EU personal data, assess the relevant transfer requirements before granting access outside the EU, using the European Commission's guidance.

The assessment should test whether the developer recognises that model instructions are not access controls. Ask them to show which actions the model can propose, which the application can execute and which require a named human decision. Review the code enforcing those boundaries rather than relying on reassuring answers.

  • Document what candidate data, prompts, recordings and repositories will be retained, who can access them and when they will be deleted.
  • Check the data-use terms of model, coding-assistant and assessment-platform accounts before candidates submit personal or proprietary material.
  • If AI will rank or evaluate applicants, check the applicable obligations and implementation dates: certain employment uses are classified as high-risk under the EU AI Act.
  • Require reviewers to record job-related evidence and make the hiring decision rather than accepting an automated score without scrutiny.
Security review of an AI agent showing permissions, approval bound to a proposed action, and diagnostic logs

Should candidates be allowed to use AI coding tools?

Usually, yes, if those tools are permitted in the job. State what is allowed, provide equivalent access and require disclosure of the tools used. Assess whether the candidate verifies generated code, understands important decisions and can debug the result. Apply the same rules to documentation and external assistance.

  • Ask for a live walkthrough of a design decision and a failed test.
  • Change an edge case during the follow-up interview and let the candidate reason through it.
  • Ask the candidate to explain unfamiliar dependencies and generated sections; repository history alone does not prove authorship.
  • Provide reasonable adjustments and avoid unnecessary recording when a live discussion will supply the evidence.

Use the follow-up interview to validate ownership

Include a stakeholder-style handover as well as a technical review. Look for concise written updates, explicit assumptions, early escalation of missing access and an explanation of uncertainty without jargon. For remote hires, confirm collaboration during your UK or European business hours and use the channels your team actually works in.

  • Trace a request from user input through retrieval, model output, permission checks and tool execution.
  • Review a failed evaluation case and ask whether the fix belongs in retrieval, the prompt, application code or the business process.
  • Ask what should be monitored after launch, what information should be excluded from logs and who responds to alerts.
  • Request a plain-English explanation of the largest unresolved risk and the evidence needed to reduce it.

Place the test in the wider hiring decision

A strong assessment does not replace relevant identity, employment-history, reference and communication checks. Assign a technical reviewer to inspect code and security, and a business reviewer to judge whether the workflow meets the brief. Record remaining gaps and decide whether supervision, a narrower role or further assessment is appropriate.

Before hiring, decide who owns source code, evaluation data, infrastructure, model-provider accounts and incident response. The guide to AI agent maintenance costs explains the recurring work that a demonstration can hide. Employers assessing a broader AI role can use the paid AI developer test framework; this assessment focuses on retrieval connected to controlled tool use.

Frequently Asked Questions

How can a non-technical employer review the result?

Judge observable behaviour: does the answer match the supplied policy, can the agent access a restricted ticket, and can it save a changed draft without fresh approval? Pair that business review with an independent technical reviewer who can inspect the code enforcing these controls.

Should the test require a particular agent framework?

Only when that framework is a genuine requirement of your existing stack. Otherwise let candidates justify their tools, including a simpler workflow without an agent framework. Ask how the choice affects maintenance and handover.

Sources

  1. ICO international-transfer guidance — ico.org.uk
  2. European Commission's guidance — commission.europa.eu
  3. EU AI Act — digital-strategy.ec.europa.eu