Content
86%Weight 40%Scale 1-5Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.
The body is a tight, highly actionable single-file skill with concrete probe commands, an executable PoC, a validation checkpoint, and a defender section. Minor intro restatement is the only conciseness drag, and error-recovery guidance is light.
Suggestions
Trim the intro paragraph so it does not restate the frontmatter description, and drop filler like the "Each cache impl handles these differently... known quirks" line.
Add a short "if step 2 does NOT return authenticated content" branch (try alternate suffixes from the variants table, or conclude not vulnerable) to strengthen the workflow feedback loop.
Clarify that the Python PoC asserts are illustrative markers to adapt per target rather than literal success gates, so the workflow checkpoint is unambiguous.
| Dimension | Reasoning | Score |
|---|---|---|
Conciseness | The body is dense and mostly lean — variant/severity tables and code blocks earn their tokens — with only minor restatement (the intro re-explains the description) and a couple of filler sentences that could be trimmed; anchor 5 requires every token to earn its place, so 4 fits better than 5. | 4 / 5 |
Actionability | It provides copy-paste-ready curl probe commands, a complete executable Python PoC with asserts, a concrete variant-path table, and an nginx defender config covering the common cases. | 5 / 5 |
Workflow Clarity | The probe section sequences Step 1 (authenticated) → Step 2 (unauthenticated) → "If the second request returns the AUTHENTICATED content of step 1 → deception confirmed" as an explicit validation checkpoint, but error-recovery guidance when the check fails is limited; anchor 5 needs feedback loops, so 4 fits better than 5. | 4 / 5 |
Progressive Disclosure | No bundle files exist, so the skill is a single well-organized file with clearly headed sections (## 1–## 8) and a Cross-references block pointing one level deep to the upstream catalog and smuggling.md, making navigation easy. | 5 / 5 |
Total | 18 / 20 Passed |