Content
82%Weight 40%Scale 1-5Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.
The content is a lean, highly actionable security skill with copy-paste PoCs and a useful decision-gate workflow. Its main weakness is minor redundancy across the method-override and bypass-pattern sections, and a few implicit validation steps that could be made explicit.
Suggestions
Consolidate the method-override material so the mechanic appears once (section 3) and is only referenced from the bypass-patterns and chains tables to remove redundancy.
Make validation explicit in the PoC workflow (e.g. a numbered 'Confirm side-effect / verify state changed' checkpoint after each state-changing exploit) to push workflow clarity toward 5.
Consider moving the large bypass-pattern and chains tables into a reference file if the skill grows, keeping SKILL.md as a lean overview.
| Dimension | Reasoning | Score |
|---|---|---|
Conciseness | The body is dense and assumes Claude's knowledge of HTTP without padding, but there is minor redundancy — method-override mechanics recur in section 3, the bypass-patterns table, and the chains table — that could be tightened. | 4 / 5 |
Actionability | Fully executable copy-paste curl one-liners throughout (verb sweep, HEAD bypass, override headers, Rails _method, Tomcat PUT webshell, OPTIONS leak, TRACE/XST) cover the common cases concretely. | 5 / 5 |
Workflow Clarity | A clear detect → exploit → chain sequence exists with a decision-gate section providing checkpoints ('Confirm with a state-changing PoC, escalate') and side-effect confirmation, though some validation steps are implicit rather than spelled out. | 4 / 5 |
Progressive Disclosure | Well-organized into nine clearly headed sections with one-level-deep cross-references to sibling skills and no nested references; no bundle files exist, and the single-file structure is appropriate, though some large tables/PoC blocks could conceptually be split out. | 4 / 5 |
Total | 17 / 20 Passed |