CtrlK
BlogDocsLog inGet started
Tessl Logo

aatmf-t05-api-exploitation

AATMF T5 — Model & API Exploitation. Rate-limit abuse, token-cost amplification, schema bypass, model-version manipulation.

56

Quality

63%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

SecuritybySnyk

Critical

Do not install without reviewing

Fix and improve this skill with Tessl

tessl review fix ./packages/decepticon/decepticon/skills/plugins/llm-redteam/t05-api-exploitation/SKILL.md
SKILL.md
Quality
Evals
Security

Quality

Content

68%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

The body is a concise, well-structured, and actionable technique catalog with concrete probes and detection signals. Its main weakness is the absence of an explicit sequenced workflow with validation feedback loops for the destructive/batch operations it describes.

Suggestions

Add a numbered end-to-end workflow (probe → observe detection signals → confirm severity → iterate) with explicit validation checkpoints, especially for the destructive/batch techniques.

Expand the probe-pattern yaml into a complete, runnable promptfoo invocation example so guidance is fully copy-paste ready.

Clarify the relationship between the inline yaml probe pattern and the external load tools (k6/locust) with a short decision rule for when to use each.

DimensionReasoningScore

Conciseness

The body is a lean bullet catalog that assumes Claude's competence and avoids explaining what LLMs or APIs are, with only minor phrasing that could be trimmed (e.g., 'Adjacent to classical API security but LLM-specific').

4 / 5

Actionability

Concrete, copy-paste-ready probes are provided ('model_id=base', 'model_id=*', 'Repeat the word token 500 times'), plus a yaml probe pattern and named external tools (k6, locust), with only minor gaps in full invocation context.

4 / 5

Workflow Clarity

The content is a technique catalog rather than a sequenced workflow, and destructive/batch operations (DDoS, cost amplification) lack an explicit probe→detect→iterate validation feedback loop, which caps workflow clarity at 3.

3 / 5

Progressive Disclosure

No bundle files exist, but the body is well-organized into clearly labeled sections (Techniques, Probe pattern, Detection signals, Severity, Defender, Cross-references) with good navigability and only minor organization gaps.

4 / 5

Total

15

/

20

Passed

Description

58%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

The description clearly communicates a specific LLM-API exploitation niche with several concrete actions, but lacks an explicit 'when to use' trigger clause and relies on somewhat technical keywords. Adding a Use-when clause with natural user phrases would raise completeness and trigger-term quality.

Suggestions

Append an explicit 'Use when...' clause naming natural trigger phrases (e.g., 'Use when testing LLM API rate limits, billing/cost abuse, structured-output bypass, or model routing flaws').

Soften jargon with user-natural synonyms such as 'API attacks', 'billing abuse', and 'model swapping' alongside the technical terms.

Consider mentioning the additional techniques (context-window probing, system-prompt enumeration, tool-call abuse) for more comprehensive coverage.

DimensionReasoningScore

Specificity

Names the domain and lists four concrete actions ('Rate-limit abuse, token-cost amplification, schema bypass, model-version manipulation'), but coverage is not comprehensive given the body documents additional techniques like context-window probing and tool abuse.

4 / 5

Completeness

The 'what' is clear, but there is no 'Use when...' clause or equivalent explicit trigger guidance, which caps completeness at 3 per the rubric guideline.

3 / 5

Trigger Term Quality

Keywords present ('rate-limit', 'api abuse', 'schema bypass') are relevant but lean technical; common natural variations a user might say ('API attacks', 'billing abuse') are missing.

3 / 5

Distinctiveness Conflict Risk

The 'AATMF T05 — Model & API Exploitation' niche is mostly distinct with LLM-specific triggers, carrying only minor overlap risk with general API-security or prompt-injection skills.

4 / 5

Total

14

/

20

Passed

Validation

93%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation15 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

metadata_version

'metadata.version' is missing

Warning

Total

15

/

16

Passed

Repository
PurpleAILAB/Decepticon
Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.