Content
76%Weight 40%Scale 1-5Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.
A highly actionable, token-efficient skill with copy-paste-ready commands covering the main GraphQL attack classes. Its weakness is workflow robustness: no validation checkpoints or fallback paths (notably for disabled introspection, a common real-world case).
Suggestions
Add a feedback loop for the most common failure case: when introspection returns an error or is disabled, provide fallback steps (e.g., field-suggestion brute-forcing or clairvoyance-style attacks).
Add explicit verification checkpoints to the Workflow (e.g., confirm SQL injection with a benign marker such as a sleep/boolean test before exfiltrating data).
Consolidate the near-duplicate enumeration curl examples into one parameterized example to trim tokens.
| Dimension | Reasoning | Score |
|---|---|---|
Conciseness | Code-first with no concept explanations and brief, purposeful comments — near the lean anchor — but the Data Enumeration section repeats near-identical curl examples differing only in field names, and the flag/secrets queries are redundant with the general pattern, leaving minor trimming opportunities. | 4 / 5 |
Actionability | Every example is a complete, copy-paste-ready curl or sqlmap command with explicit headers and payloads, covering discovery, introspection, enumeration, injection, and batching; schema-dependent field names are explicitly flagged for substitution. | 5 / 5 |
Workflow Clarity | The 6-step Workflow is clearly sequenced, but all checkpoints are implicit and there is no error-recovery guidance (e.g., what to do when introspection is disabled); the batch query abuse section is a batch operation without validation, which caps workflow clarity at 3 per the rubric. | 3 / 5 |
Progressive Disclosure | Well-organized headed sections in a self-contained ~112-line body with no bundle files; good structure overall, but it exceeds the under-50-line simple-skill threshold and the full introspection query plus per-case examples could arguably live in a reference file, leaving minor organization gaps. | 4 / 5 |
Total | 16 / 20 Passed |