Content
67%Weight 40%Scale 1-5Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.
An actionable, well-structured testing skill with concrete payloads and explicit proof/validation criteria. The main weakness is mild verbosity from re-explaining HTML injection/XSS basics and restating the proof criterion multiple times.
Suggestions
Trim the 'What is HTML Injection' and 'Distinguishing HTML Injection from XSS' sections to the non-obvious details only (dangling-markup and email-context vectors) since Claude already knows what HTML injection and XSS are.
State the proof criterion (literal '<' angle brackets vs '<') once in the Proof section and reference it elsewhere rather than restating it in the intro, Autonomous Testing Priority, and Proof sections.
Formalise the stored-injection workflow as an explicit numbered sequence (inject at storage endpoint → GET display page → check for unescaped tags) to match the reflected-flow clarity.
| Dimension | Reasoning | Score |
|---|---|---|
Conciseness | Mostly efficient with novel attacker-technique detail, but the 'What is HTML Injection' and 'Distinguishing HTML Injection from XSS' sections re-explain concepts Claude already knows, and the proof criterion is restated across three sections. | 3 / 5 |
Actionability | Provides copy-paste-ready payloads ('"><img src=x onerror=alert(91234)>', dangling-markup vector) and a concrete proof criterion (literal '<' vs '<'), with only the CANARY placeholder needing substitution. | 4 / 5 |
Workflow Clarity | Clear sequence (Pattern 1 → alternate tag types → stored variant → escalate to XSS) with an explicit validation checkpoint ('Unescaped angle brackets in the response = confirmed injection') and an escalation feedback loop; minor gaps in formalising the stored-injection retrieve step. | 4 / 5 |
Progressive Disclosure | Well-organised self-contained sections with no external references needed; slightly above the simple-skill line with some redundancy that could be tightened, keeping it just below a 5. | 4 / 5 |
Total | 15 / 20 Passed |