CtrlK
BlogDocsLog inGet started
Tessl Logo

exploiter-overview

Stage 5 exploit construction playbook. Weaponizes validated primitives into multi-step chains that reach crown jewels. Load at exploiter-agent startup.

56

Quality

65%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

SecuritybySnyk

Critical

Do not install without reviewing

Fix and improve this skill with Tessl

tessl review fix ./packages/decepticon/decepticon/skills/plugins/exploiter/SKILL.md
SKILL.md
Quality
Evals
Security

Quality

Content

75%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

The body is a tight, actionable playbook with concrete commands, a sequenced workflow, and an explicit validation checkpoint, held back only by a few trim opportunities, minor signature gaps, and an implicit retry loop.

DimensionReasoningScore

Conciseness

The body is lean and assumes competence — no concept re-explanation — with only minor boundary/steering prose ('Unlike the earlier stages...') that could be trimmed slightly.

4 / 5

Actionability

Provides concrete, parameterized commands (kg_query, plan_attack_chains, kg_add_node, kg_triage_binary) with specific artifact paths; minor gaps remain around the validate_finding signature and template placeholders.

4 / 5

Workflow Clarity

A clear five-step sequence includes an explicit validation step (validate_finding on the full chain) and an anti-patterns checklist; the fix-and-retry feedback loop on validation failure is implied rather than spelled out.

4 / 5

Progressive Disclosure

Well-organized into clear sections (Wide toolbox, Chain workflow, Binary targets, Anti-patterns) with no nested or broken references; at ~70 lines it slightly exceeds the under-50 simple-skill threshold that would unlock a 5.

4 / 5

Total

16

/

20

Passed

Description

55%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

The description conveys a distinct, specific niche and concrete actions but relies on internal-pipeline jargon rather than natural user-facing trigger phrases and lacks an explicit 'Use when...' clause, capping completeness.

Suggestions

Add a 'Use when ...' clause with natural trigger phrases a user would actually say (e.g., 'Use when assembling an exploit chain from validated findings to reach a crown-jewel target').

Soften or supplement jargon terms ('Stage 5', 'validated primitives', 'crown jewels') with plain-language synonyms so the description matches how users phrase the need.

Clarify the 'when' separately from the load-time instruction so the use-trigger is distinct from 'Load at exploiter-agent startup'.

DimensionReasoningScore

Specificity

Lists several concrete actions ('exploit construction playbook', 'Weaponizes validated primitives into multi-step chains that reach crown jewels') with only minor jargon-driven gaps in coverage.

4 / 5

Completeness

The 'what' is clear but the only 'when' guidance is 'Load at exploiter-agent startup' (a load instruction, not a use-trigger); with no 'Use when...' clause, completeness is capped at 3 per the rubric.

3 / 5

Trigger Term Quality

Trigger terms are pipeline-internal jargon ('Stage 5', 'validated primitives', 'crown jewels', 'exploiter-agent') that a user would rarely say naturally; common phrases are missing.

2 / 5

Distinctiveness Conflict Risk

Occupies a clear niche (exploit weaponization in a vuln-research pipeline) with distinct, specialized triggers and minimal risk of firing for an unrelated skill.

5 / 5

Total

14

/

20

Passed

Validation

93%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation15 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

metadata_version

'metadata.version' is missing

Warning

Total

15

/

16

Passed

Repository
PurpleAILAB/Decepticon
Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.