Content
100%Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.
A tight, highly actionable hunting playbook: concrete payloads, framework-specific disclosure signatures, a clear recon-to-validation sequence, and clean sectioning with no padding or redundant concept explanations.
| Dimension | Reasoning | Score |
|---|---|---|
Conciseness | The body is lean and assumes competence — it frames the attack ('A broken app... renders a developer error page straight to the client') without explaining what an ORM, stack trace, or framework is, and every section earns its tokens; not level 2 because there is no unnecessary explanation to trim. | 3 / 3 |
Actionability | Provides concrete, copy-paste-ready payloads ('{"rating":"notanumber","comment":[1,2,3]}', 'GET /item/%00') and specific per-framework disclosure signatures (SequelizeDatabaseError, '<b>Warning</b> ... /var/www/...', 'Traceback (most recent call last)') — fully executable guidance rather than vague direction. | 3 / 3 |
Workflow Clarity | A clear Recon → Attack → confirm-signal → Validation-discipline sequence with an explicit verification checkpoint ('A clean JSON error... is NOT a finding — that's correct handling') and evidence-capture guidance; this is a read-only hunting flow so the destructive/batch cap does not apply, fitting the level-3 anchor. | 3 / 3 |
Progressive Disclosure | A simple single-purpose skill (~60 lines, no external references needed) organized into well-signaled sections (Recon, Attack, What counts as a leak, Validation discipline); per the simple-skills note, well-organized sections with no need for bundle files score 3. | 3 / 3 |
Total | 12 / 12 Passed |