Content
76%Weight 40%Scale 1-5Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.
Highly actionable and token-efficient command reference for recon, but presented as a single monolithic code block with broken/missing reference files and no explicit validation checkpoints for its batch scanning operations.
Suggestions
Break the monolithic code block into structured sections (## 被动侦察 / ## 主动流水线 / ## 绕过技巧) and move the long BT-panel, UniApp-reversing, and nginx-404 details into the referenced files, then actually create references/nginx-404-differential-fingerprinting.md and references/uniapp-dcloud-apk-reversing.md.
Add explicit validation/feedback checkpoints between batch stages (e.g. 'after dnsx: confirm alive_subs.txt is non-empty before scanning; if empty, fall back to passive sources').
Replace '{domain}/{target}' placeholders with a short parameter legend or a single consistent token so the pipeline is unambiguous to execute.
| Dimension | Reasoning | Score |
|---|---|---|
Conciseness | Dense, command-packed block assuming Claude knows the tools; the 🚨 warnings capture non-obvious domain gotchas (CDN 502 vs 404 semantics, BT panel cookie fingerprint) that earn their tokens rather than padding. | 5 / 5 |
Actionability | Copy-paste-ready terminal commands with concrete flags and a {domain}/{target} placeholder convention; covers passive, active enumeration, fuzzing, and nuclei scanning directly. | 5 / 5 |
Workflow Clarity | A clear pipeline sequence exists (passive → subfinder/amass → dnsx → httpx → naabu/nmap → katana/gau → nuclei) but batch/scanning operations lack explicit validation checkpoints or fix-retry feedback loops, capping clarity per the batch-operation rule. | 3 / 5 |
Progressive Disclosure | Everything is inlined in one monolithic code block with no section headers; the two '详见 references/*.md' pointers are signaled but the referenced files do not exist in the bundle, so detail that belongs in separate files is buried. | 2 / 5 |
Total | 15 / 20 Passed |