Content
71%Weight 40%Scale 1-5Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.
A lean, well-sequenced instruction skill with concrete schemas, explicit content rules, and a validation checklist. Its main weakness is bundle organization: the provided kill-chain-templates.md reference is orphaned while the body points at sibling skills outside the bundle, and the deprecation guidance is repeated more than needed.
Suggestions
Link references/kill-chain-templates.md from the kill-chain design section (e.g., 'Use the Engagement Type → Phase Selection table in references/kill-chain-templates.md') so the bundled reference is discoverable instead of relying on sibling skills outside the bundle.
Consolidate the thrice-repeated communication_plan deprecation into a single statement (Generation Rules) and drop the redundant rows/mentions elsewhere, trimming Validation/Generation Rules overlap.
Add a brief example plan/conops.json snippet (or link one) showing the CONOPS/ThreatActor/KillChainPhase schema applied, so the output step is copy-paste ready.
| Dimension | Reasoning | Score |
|---|---|---|
Conciseness | The body is efficient and operator-focused ('Don't include phases outside RoE scope. Recon-only engagement → only recon phase', 'Timeline uses absolute dates — never relative') with no padding or explanations of concepts Claude already knows. Minor trimmable redundancy: the communication_plan deprecation is stated three times ('Coordination belongs in ContactPlan; CONOPS.communication_plan is deprecated', 'communication_plan is DEPRECATED', and the schema table row), and Generation Rules partly repeat the Validation checklist. | 4 / 5 |
Actionability | Concrete, executable guidance throughout: exact file paths ('Create or revise plan/conops.json'), full schema tables with field names, types, and allowed values ('one of recon, initial-access, post-exploit, c2, exfiltration, reporting'), and specific content rules ('All MITRE ATT&CK technique IDs are valid'). Falls short of 5 because 'select applicable phases using the active planning schema' is abstract and there is no example conops.json output showing the schema applied. | 4 / 5 |
Workflow Clarity | Clear sequence — Prerequisites ('Read plan/roe.json first') → threat model/narrative → kill-chain design → Output → Validation — with an explicit validation checklist ('At least 2 success criteria defined'). Not 5 because there is no error-recovery feedback loop (what to do when a validation check fails) and the Output step defers to a vague 'selected planning workflow' rather than concrete publication steps. | 4 / 5 |
Progressive Disclosure | The body is well-sectioned, but the one bundled reference file (references/kill-chain-templates.md, which contains exactly the phase-selection tables the kill-chain design section needs) is never referenced or linked. Instead the body leans on non-bundled siblings ('the tier table ... in threat-profile/SKILL.md', 'The deconfliction-template skill describes DeconflictionPlan') and warns against depending on files 'Skillogy cannot return', so the structure is present but navigation to the actual bundle is unclear. | 3 / 5 |
Total | 15 / 20 Passed |