CtrlK
BlogDocsLog inGet started
Tessl Logo

chain-ssrf-to-rce

Build and validate SSRF pivot chains toward metadata/infra control and final code execution impact.

62

Quality

74%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

SecuritybySnyk

Critical

Do not install without reviewing

Fix and improve this skill with Tessl

tessl review fix ./packages/decepticon/decepticon/skills/standard/analyst/chains/ssrf-to-rce/SKILL.md
SKILL.md
Quality
Evals
Security

Quality

Content

78%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

The body is exceptionally concise and well-structured with a clear canonical path and a confirmation checkpoint, but the steps stay at a strategic level rather than providing executable commands or payloads. Adding concrete tool invocations and an explicit retry-on-failure loop would strengthen actionability and workflow clarity.

Suggestions

Add concrete, runnable examples for the pivot steps (e.g. a sample IMDS request, a gopher/dns-reinding payload snippet) to lift actionability.

Include an explicit feedback loop after step 4 (e.g. 'If execution is unconfirmed, revise the payload and redeploy') to close the validation gap.

Show the actual command form for plan_attack_chains / suggest_objectives_from_chains rather than only naming them.

DimensionReasoningScore

Conciseness

The body is lean and efficient (~21 lines) with no padding or explanation of concepts Claude already knows; every token earns its place.

5 / 5

Actionability

It gives a sequenced strategy and names concrete tools (plan_attack_chains, suggest_objectives_from_chains), but the pivot steps are high-level hints without executable commands, payloads, or specific API calls.

3 / 5

Workflow Clarity

A clear 4-step numbered sequence with an explicit confirm checkpoint at step 4 ('Confirm code execution and business impact'); minor gap is the absence of an explicit failure/feedback loop.

4 / 5

Progressive Disclosure

Under 50 lines with no need for external references and well-organized sections (Canonical path, Graph guidance), meeting the simple-skill exception for a top score.

5 / 5

Total

17

/

20

Passed

Description

70%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

The description is specific and distinct, naming concrete actions within a well-defined offensive-security niche, but it lacks an explicit 'when to use' trigger clause. Adding a 'Use when...' phrase with natural synonyms (RCE, cloud metadata, IMDS) would raise completeness and trigger quality.

Suggestions

Append an explicit 'Use when...' clause, e.g. 'Use when chaining SSRF to RCE via cloud metadata (IMDS), IAM roles, gopher, or DNS rebinding.'

Add the natural term 'RCE' and 'cloud metadata/IMDS' to the description so trigger terms match what users actually say.

Consider listing one or two more concrete actions (e.g. extract credentials, deploy payload) to broaden coverage toward a 5 in specificity.

DimensionReasoningScore

Specificity

Names the domain and several concrete actions ('Build and validate SSRF pivot chains toward metadata/infra control and final code execution impact'), but coverage is limited to one chain type rather than a comprehensive action set.

4 / 5

Completeness

The 'what' is clear but there is no 'Use when...' clause or equivalent explicit trigger guidance, which caps completeness at 3 per the rubric guideline.

3 / 5

Trigger Term Quality

Good natural keywords a security tester would say (SSRF, pivot, metadata, code execution), though common synonyms like RCE, cloud, and IMDS are absent from the description.

4 / 5

Distinctiveness Conflict Risk

A clear niche (SSRF-to-RCE chaining) with distinct triggers and minimal overlap risk with other skills.

5 / 5

Total

16

/

20

Passed

Validation

93%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation15 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

metadata_version

'metadata.version' is missing

Warning

Total

15

/

16

Passed

Repository
PurpleAILAB/Decepticon
Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.