security-arsenal

Security payloads, bypass tables, wordlists, gf pattern names, always-rejected bug list, and conditionally-valid-with-chain table. Use when you need specific payloads for XSS/SSRF/SQLi/XXE/NoSQLi/command injection/SSTI/IDOR/path-traversal/HTTP smuggling/WebSocket/MFA bypass, or bypass techniques. Submittability and the always-rejected / what-NOT-to-submit decision are owned by triage-validation.

Quality

86%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

Securityby

Critical

Do not install without reviewing

Quality

Content

78%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

A highly actionable, copy-paste-ready payload library with strong embedded validation discipline (OOB gate, statistical sampling) and useful 2026 freshness notes. Its main weakness is progressive disclosure: a reference corpus of this size is inlined entirely in SKILL.md with no file split or external references.

Suggestions

Split the per-class payload sections (XSS, SSRF, SQLi, etc.) into one-level-deep reference files under references/ and have SKILL.md point to them, leaving only an overview and the Operator Notes inline.

Move the ALWAYS REJECTED and CONDITIONALLY VALID tables into a dedicated references/submittability.md (co-owned with triage-validation) so they can be loaded only when a submission decision is being made.

Tighten the Operator Notes prose (e.g., the freshness and WAF-eval-order paragraphs) into terser checklists so the inline portion earns every token.

Dimension	Reasoning	Score
Conciseness	Dense, payload-focused content that assumes Claude's competence (no "what is XSS" padding); the Operator Notes prose could be tightened slightly, keeping it just below the lean/efficient anchor.	4 / 5
Actionability	Fully executable, copy-paste-ready payloads and commands (ffuf, curl, hashcat, Python/JS snippets) covering the common cases across every represented vulnerability class.	5 / 5
Workflow Clarity	Embedded sequenced guidance (WAF bypass evaluation order 1-4) and explicit validation gates (OOB-Or-It-Didn't-Happen, n>=10 Welch t-stat sampling) are present, but as a reference library it lacks a single coherent end-to-end workflow with feedback loops.	4 / 5
Progressive Disclosure	Strong internal section structure, but the skill is a monolithic ~910-line SKILL.md with no bundle files and no one-level-deep references; per-class payload tables and wordlists that clearly belong in separate files are inlined.	3 / 5
	Total	16 / 20 Passed

Description

95%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A strong, specific description that clearly states what the skill provides and when to use it, with comprehensive vulnerability-class trigger terms and explicit boundary marking against a sibling skill. The only weakness is second-person voice in the trigger clause.

Dimension	Reasoning	Score
Specificity	Enumerates concrete capabilities ("Security payloads, bypass tables, wordlists, gf pattern names, always-rejected bug list, and conditionally-valid-with-chain table"), which is comprehensive; reduced from 5 to 4 because the trigger clause uses second person ("Use when you need specific payloads").	4 / 5
Completeness	Explicitly answers both what ("Security payloads, bypass tables, wordlists...") and when ("Use when you need specific payloads for...") with concrete trigger phrases.	5 / 5
Trigger Term Quality	Comprehensive natural-term coverage with synonyms across all major vulnerability classes: "XSS/SSRF/SQLi/XXE/NoSQLi/command injection/SSTI/IDOR/path-traversal/HTTP smuggling/WebSocket/MFA bypass, or bypass techniques".	5 / 5
Distinctiveness Conflict Risk	Clear payload/bypass niche with distinct triggers, and it explicitly scopes submittability decisions out ("owned by triage-validation"), minimizing overlap with the triage skill.	5 / 5
	Total	19 / 20 Passed

Validation

81%

Warnings & errors only

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 13 / 16 Passed

Validation for skill structure

Criteria	Description	Result
skill_md_line_count	SKILL.md is long (913 lines); consider splitting into references/ and linking	Warning
frontmatter_unknown_keys	Unknown frontmatter key(s) found; consider removing or moving to metadata	Warning
relative_links	Relative link issues: 1 missing	Warning

	Total	13 / 16 Passed

Repository: elementalsouls/Claude-BugHunter
Path: skills/security-arsenal/SKILL.md
Commit: d4b54e1

Reviewed: 3 days ago

Table of Contents

Discovery Implementation Validation

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.