windows-privilege-escalation

This skill should be used when the user asks to "escalate privileges on Windows," "find Windows privesc vectors," "enumerate Windows for privilege escalation," "exploit Windows misconfigurations," or "perform post-exploitation privilege escalation." It provides comprehensive guidance for discovering and exploiting privilege escalation vulnerabilities in Windows environments.

Quality

73%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

Securityby

Critical

Do not install without reviewing

Fix and improve this skill with Tessl

tessl review fix ./skills/windows-privilege-escalation/SKILL.md

Quality

Content

57%

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

A highly actionable, command-dense privesc reference, but it is monolithic with no progressive disclosure into bundle files and lacks inline validation/feedback checkpoints in its workflow, with some redundant recap sections.

Suggestions

Split the large command reference into one-level-deep bundle files (e.g., references/enumeration.md, references/credential-harvesting.md, references/kernel-exploits.md) and keep SKILL.md as a concise overview with signaled links, to improve progressive_disclosure.

Add explicit validation checkpoints between workflow phases (e.g., after enumeration, confirm a candidate vector and verify required privileges/permissions before executing an exploit) with a fix-and-retry loop, to raise workflow_clarity.

Remove the redundant Quick Reference tables and Examples that re-state commands already shown in the Core Workflow, or consolidate them, to reduce token redundancy and improve conciseness.

Dimension	Reasoning	Score
Conciseness	The body is dense and free of concept-explanation padding, but the Quick Reference tables, the Impersonation Privilege Exploits table, and the Examples section re-state commands and vectors already detailed in the Core Workflow, so it could be tightened; not a 3 because of this redundancy and length.	2 / 3
Actionability	Nearly the entire body is concrete, executable PowerShell/CMD commands with real syntax and copy-paste-ready examples, matching the fully-executable anchor.	3 / 3
Workflow Clarity	A clear numbered sequence (Enumeration through Kernel Exploitation) is present, but there are no inline validation checkpoints or feedback loops between steps for exploit/destructive operations; the trailing Troubleshooting table is a partial but not inline mechanism, capping this at 2.	2 / 3
Progressive Disclosure	No bundle files exist (references/, scripts/, assets/ are empty) and the body contains no external file references; the ~490-line skill is a monolithic wall of text whose enumeration, credential-harvesting, and kernel-exploit sections should be split into separate reference files.	1 / 3
	Total	8 / 12 Passed

Description

90%

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A strong description with explicit trigger phrasings and a clear what/when structure; its only weakness is that the stated capabilities are abstract ('discovering and exploiting') rather than a list of concrete actions.

Dimension	Reasoning	Score
Specificity	It names the domain (Windows privilege escalation) and two abstract actions ('discovering and exploiting'), but does not enumerate multiple concrete actions as a score-3 anchor would; it sits above score 1 because a domain and actions are named.	2 / 3
Completeness	It explicitly answers 'when' with an explicit 'Use when the user asks...' clause plus five triggers, and 'what' with 'provides comprehensive guidance for discovering and exploiting privilege escalation vulnerabilities in Windows environments.'	3 / 3
Trigger Term Quality	Five quoted, natural user phrasings are given ('escalate privileges on Windows,' 'find Windows privesc vectors,' 'enumerate Windows for privilege escalation,' etc.), covering common variations a user would actually say.	3 / 3
Distinctiveness Conflict Risk	Windows privilege escalation is a clear, narrow niche with distinct OS-specific triggers unlikely to be mistaken for other skills.	3 / 3
	Total	11 / 12 Passed

Validation

100%

Warnings & errors only

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 16 / 16 Passed

Validation for skill structure

No warnings or errors.

Repository: zebbern/claude-code-guide
Path: skills/windows-privilege-escalation/SKILL.md
Commit: af7d491

Reviewed: about 8 hours ago

Table of Contents

Discovery Implementation Validation

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.