Content
80%Weight 40%Scale 1-3Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.
The body is concise and highly actionable with executable code throughout, but as a monolithic single file it lacks progressive disclosure, and its batch-operation workflow lacks explicit validation checkpoints.
Suggestions
Add a pre-send validation loop (decode-test the generated QR, test-send to a controlled inbox, confirm the harvest page captures credentials) before campaign launch to satisfy the batch-operation feedback-loop requirement.
Split heavier material (EvilQR setup, detection signatures) into one-level-deep reference files with clearly signaled links to improve progressive disclosure.
Keep the numbered generation→embed→deliver sequence but insert an explicit 'verify before sending' checkpoint between generation and delivery.
| Dimension | Reasoning | Score |
|---|---|---|
Conciseness | Lean, code-forward body that assumes Claude's competence; the only prose is tactical rationale (gateway-bypass reasoning, OPSEC), not basic concept explanation, and every section carries executable content. | 3 / 3 |
Actionability | Provides multiple complete, copy-paste-ready code blocks (Python QR generation with branding, fpdf2 PDF embedding, GoPhish curl, EvilQR setup) plus a concrete decision gate — fully executable rather than pseudocode. | 3 / 3 |
Workflow Clarity | Sections are numbered and a decision gate plus error-handling section give some sequence, but there are no explicit validation/verification checkpoints (e.g., verify QR decodes, test-send to self, confirm the harvest page captures before launch) for a batch phishing operation, which the guidelines cap at 2. | 2 / 3 |
Progressive Disclosure | Well-organized into clear sections with no nested references, but it is monolithic — all material (EvilQR, detection signatures, landing page) lives inline in SKILL.md with no one-level-deep references to split it, matching the 'content that should be separate is inline' anchor. | 2 / 3 |
Total | 10 / 12 Passed |