CtrlK
BlogDocsLog inGet started
Tessl Logo
SkillPublic

frida

Dynamic instrumentation via Frida - attach to or spawn a process, load a JS hook script, capture send() events into a lifecycle-managed run directory. Supports local, USB-attached, and remote frida-server targets.

Quality

81%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide
SecuritybySnyk

Passed

No findings from the security scan

SKILL.md
Quality
Evals
Security

Quality

Content

82%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

A strong, highly actionable reference: executable commands with concrete examples, an explicit failure-mode recovery table, and tight information density. Its weaknesses are modest — no explicit step-by-step workflow framing, a dangling docs/frida.md reference unverifiable against the (empty) bundle, and a few verbose passages.

Suggestions

Move the "Evidence caveat" paragraph and the pipeline-integration consumer table into a separate reference file (e.g. references/pipeline.md) and link to it, keeping SKILL.md as a lean overview.

Condense the "Status" section to a few lines; roadmap details (planned integrations, abandoned PR #57) dilute the operational focus.

Add a brief numbered "basic flow" (install → verify with raptor doctor → invoke → read metadata.json → consult failure modes) to make the implicit workflow sequence explicit.

DimensionReasoningScore

Conciseness

A dense, information-rich reference with no explanations of concepts Claude already knows, but several sentences carry project-roadmap detail (abandoned PR #57, planned integrations) and the "Evidence caveat" paragraph could be tightened, so anchor 4 fits better than 5.

4 / 5

Actionability

Fully executable guidance throughout: install commands, a complete CLI invocation with all flags, five commented example commands covering local/spawn/USB/remote/custom-script cases, and a copy-paste-ready Python API block with three concrete variants.

5 / 5

Workflow Clarity

Sequence is legible via ordered sections and includes explicit validation/recovery hooks: `raptor doctor` confirms the install, and the "Failure modes (read metadata.json first)" table maps concrete error fragments to causes and fixes. Scored 4 rather than 5 because the steps are implicit in section order rather than explicitly enumerated as a workflow.

4 / 5

Progressive Disclosure

Well-organized single-file skill with clear section headers and one clearly signaled one-level reference ("See `docs/frida.md"); no bundle files exist to offload detail into, and dense sections like the threat model and pipeline-integration table are borderline candidates for extraction. Anchor 4 fits: good structure with minor organization gaps.

4 / 5

Total

17

/

20

Passed

Description

70%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A specific, well-targeted description with concrete actions and distinct tool-named triggers, but it lacks any "when to use" guidance, which is the main gap and the reason the completeness score is capped at 3.

Suggestions

Append a "Use when" clause, e.g. "Use when a flagged sink needs runtime confirmation, when an opaque binary or mobile app needs an API trace, or when SSL pinning blocks a MITM proxy."

Surface one or two headline use cases users would naturally name (e.g. "trace API calls", "bypass SSL pinning") so trigger terms cover the skill's most common invocations.

Consider mentioning that it works on processes, binaries, and mobile apps to round out the capability list for full specificity.

DimensionReasoningScore

Specificity

Lists several concrete actions ("attach to or spawn a process", "load a JS hook script", "capture send() events into a lifecycle-managed run directory") plus target modes, but omits core uses shown in the body (API tracing, SSL unpinning, memory scanning), so it is not comprehensive.

4 / 5

Completeness

The "what" is clear and concrete, but there is no "Use when..." clause or equivalent explicit trigger guidance, which caps completeness at 3 per the rubric guidelines.

3 / 5

Trigger Term Quality

Includes strong natural terms ("Frida", "dynamic instrumentation", "hook", "attach", "frida-server", "local, USB-attached, and remote") but misses common phrasings a user might say such as "runtime trace", "SSL pinning", or "mobile app".

4 / 5

Distinctiveness Conflict Risk

"Dynamic instrumentation via Frida" names a specific tool with distinct trigger terms (hook, attach/spawn, frida-server), creating a clear niche with minimal overlap risk against generic debugging or analysis skills.

5 / 5

Total

16

/

20

Passed

Validation

100%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 16 / 16 Passed

Validation for skill structure

No warnings or errors.

Repository

gadievron/raptor

Path

.claude/skills/frida/SKILL.md

Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.