ad-overview

Active Directory attack lane — BloodHound ingestion, Kerberoasting, ADCS ESC scanning, DCSync, LAPS extraction.

Quality

75%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

Securityby

Critical

Do not install without reviewing

Fix and improve this skill with Tessl

tessl review fix ./packages/decepticon/decepticon/skills/standard/ad/SKILL.md

Quality

Content

76%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

The body is a lean, actionable catalog that points cleanly to detailed skill files, but its attack workflow lacks the validation/verification checkpoints the rubric requires for destructive operations. Adding explicit verification gates would raise workflow clarity.

Suggestions

Insert verification checkpoints into the workflow, e.g. after ingestion confirm nodes loaded, and after DCSync/cracking confirm credentials validate before declaring compromise.

Render the playbook paths as markdown links (e.g. [kerberoasting](/skills/standard/ad/kerberoasting/SKILL.md)) to improve navigation and the progressive-disclosure signal.

Dimension	Reasoning	Score
Conciseness	Lean and efficient: a playbook table, a numbered workflow, and crown-jewel snippets with no padding and no explanation of concepts Claude already knows.	5 / 5
Actionability	Provides concrete, executable commands (bloodhound-python, certipy, bh_ingest_zip) with only minor gaps from placeholder args (user/pass/X).	4 / 5
Workflow Clarity	A clear 7-step sequence exists, but destructive/batch attack operations (DCSync, domain compromise) lack validation or verification checkpoints, capping the score at 3.	3 / 5
Progressive Disclosure	Well-structured catalog with a Playbooks table pointing one level deep to per-skill SKILL.md files; references are clear but given as plain paths rather than navigable links.	4 / 5
	Total	16 / 20 Passed

Description

75%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

The description is specific and well-niched with concrete named techniques, but omits any explicit 'when to use' trigger guidance, which caps its completeness. Adding a 'Use when...' clause citing natural user phrasing would raise the score.

Suggestions

Append a 'Use when...' clause with natural user phrasing, e.g. 'Use when compromising an Active Directory / Windows domain, dumping credentials, or auditing AD CS templates.'

Add common synonyms beyond jargon (e.g. 'AD', 'Windows domain', 'domain controller') so natural phrasings trigger the skill.

Dimension	Reasoning	Score
Specificity	Lists multiple concrete attack actions ('BloodHound ingestion, Kerberoasting, ADCS ESC scanning, DCSync, LAPS extraction'), matching the comprehensive-coverage anchor.	5 / 5
Completeness	The 'what' is explicit but there is no 'Use when...' clause or equivalent trigger guidance, capping completeness at 3 per the rubric guideline.	3 / 5
Trigger Term Quality	Good coverage of domain-specific terms users would say (BloodHound, Kerberoasting, DCSync, LAPS) but jargon-heavy and missing common synonyms like 'AD' or 'domain'.	4 / 5
Distinctiveness Conflict Risk	A clear niche (Active Directory attack techniques) with distinct, specific triggers and minimal overlap risk with unrelated skills.	5 / 5
	Total	17 / 20 Passed

Validation

87%

Warnings & errors only

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 14 / 16 Passed

Validation for skill structure

Criteria	Description	Result
metadata_version	'metadata.version' is missing	Warning
metadata_field	'metadata' should map string keys to string values	Warning

	Total	14 / 16 Passed

Repository: PurpleAILAB/Decepticon
Path: packages/decepticon/decepticon/skills/standard/ad/SKILL.md
Commit: 0cf691e

Reviewed: 2 days ago

Table of Contents

Discovery Implementation Validation

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.