Content
75%Weight 40%Scale 1-5Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.
A well-organized, actionable attack playbook with concrete tooling and a feedback-looped PoC workflow; it is held just below top marks by minor padding, a few descriptive (non-executable) sections, and an all-in-one structure that could offload detail to reference files.
Suggestions
Add an explicit validation/checkpoint step to the PoC workflow (e.g. a concrete "confirm logged-in-as-target via /me or session cookie" test) to push workflow_clarity toward 5.
Give runnable steps or example requests for XSW2-8 and the metadata-abuse section instead of leaving them descriptive.
Move the Known exemplars and full XSW1-8 mechanics into a separate reference file referenced from SKILL.md to improve progressive_disclosure.
| Dimension | Reasoning | Score |
|---|---|---|
Conciseness | Mostly lean and reference-shaped with concrete XML/bash snippets and a tight PoC pattern; only minor trimmable over-explanation remains (e.g. the opening "SAML is XML-based SSO used heavily in enterprise" line restates common knowledge). | 4 / 5 |
Actionability | Provides concrete, executable guidance — a working decode one-liner (`echo ... | base64 -d | xmllint --format -`), named tools (SAML Raider, samltool.com, samlxss, Python saml2) and a step-by-step PoC pattern — though XSW2-8, self-signed, and metadata sections stay descriptive rather than giving runnable steps. | 4 / 5 |
Workflow Clarity | Section 11 gives a clearly sequenced 7-step PoC workflow with built-in fallback branches ("If XSW fails... If still fails, try signature stripping"), which is a genuine feedback loop; it falls short of a 5 because explicit pass/fail validation checkpoints are light and several attack sections are presented as a catalog rather than a single end-to-end workflow. | 4 / 5 |
Progressive Disclosure | Well-structured into 13 numbered sections plus a Cross-references block with clearly signaled one-level-deep pointers (to the upstream corpus Readme.md), and no nested/buried references; the main gap is that the exemplar list and detailed XSW mechanics are inlined in SKILL.md rather than split into separate reference files. | 4 / 5 |
Total | 16 / 20 Passed |