Content
86%Weight 40%Scale 1-5Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.
A high-signal, highly actionable attack cheat-sheet that is token-efficient and rich with concrete payloads and verification steps, but it is presented as one monolithic inlined code block rather than progressively disclosed across reference files.
Suggestions
Split the monolithic code block into one-level-deep reference files (e.g. references/injection.md, references/auth.md, references/server-side.md, references/cdn-bypass.md) and have SKILL.md point to them with a brief overview.
Promote the === section markers to real markdown headers so each attack category is navigable rather than buried inside a single fenced block.
Add a short top-level decision/workflow section (e.g. 'pick attack class → verify bypass with the stated signal → escalate') to give an explicit master sequence alongside the per-technique checkpoints.
| Dimension | Reasoning | Score |
|---|---|---|
Conciseness | Extremely token-dense: abbreviation-driven one-liners and payload fragments assume Claude's competence (e.g. 'SQLi: sqlmap -u URL --technique=BEUSTQ --risk=3 --level=5 --os-shell', '绕空格$IFS,绕cat用tac/nl') with no padding or explanation of basics. | 5 / 5 |
Actionability | Provides copy-paste-ready commands and payloads across the common cases (sqlmap flags, SSTI probes {{7*7}}, XXE entities, jwt_tool -X a, NoSQL $ne/$regex operators, traversal strings like /api/v1/v/..;/admin). | 5 / 5 |
Workflow Clarity | Key attack chains carry explicit verification checkpoints ('验证: 正常/admin返回nginx 403… 用/api/v1/v/..;/admin返回Tomcat 404 = 绕过成功', '检测: 响应含…data字段是你的真实IP') and the CDN 502 section lays out a ①–⑤ decision sequence, though there is no overarching workflow and some entries lack checkpoints. | 4 / 5 |
Progressive Disclosure | No bundle files exist (references/, scripts/, assets/ absent) and the entire body is a single monolithic code block with only internal === section markers; a reference this large would benefit from being split into one-level-deep files (injection, auth, cdn-bypass) with clear navigation. | 3 / 5 |
Total | 17 / 20 Passed |