CtrlK
BlogDocsLog inGet started
Tessl Logo

competition-request-normalization-smuggling

Internal downstream skill for ctf-sandbox-orchestrator. CTF-sandbox workflow for parser differentials, HTTP normalization gaps, ambiguous headers, path decoding drift, transfer-framing mismatches, and request smuggling routes. Use when the user asks to trace proxy and backend parse differences, conflicting path normalization, Host or forwarded-header ambiguity, CL/TE issues, or routing outcomes that differ across hops. Use only after `$ctf-sandbox-orchestrator` has already established sandbox assumptions and routed here.

72

Quality

88%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

SecuritybySnyk

Critical

Do not install without reviewing

SKILL.md
Quality
Evals
Security

Quality

Content

77%Weight 40%Scale 1-3

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

A concise, well-organized CTF workflow body with good progressive disclosure to a real reference file. It is held back by lacking executable examples and explicit validation feedback loops for the reproduction steps.

Suggestions

Add a minimal paired-request example (baseline vs. one-delta differential) so the 'Prove Differential Interpretation' step is executable rather than descriptive.

Insert an explicit validation checkpoint after 'Reduce To Decisive Smuggling Chain'—e.g., confirm the reproduced effect on the target before declaring the chain decisive.

Include one concrete reproduction check (such as comparing route match / body boundary across hops) as a verify-then-fix loop rather than leaving it implied.

DimensionReasoningScore

Conciseness

The body is lean and assumes Claude's competence, listing hops and dimensions tersely without explaining what HTTP smuggling or normalization is, so every token earns its place.

3 / 3

Actionability

It gives concrete procedural guidance (map hops, build paired requests differing in one dimension, capture specific log fields) but no executable commands or request examples, fitting the 'some concrete guidance but incomplete' anchor.

2 / 3

Workflow Clarity

A clear numbered Quick Start sequence and staged Workflow exist, but validation/reproduction checkpoints are only implied ('Prove which hop', 'Reproduce one minimal differential path') rather than explicit validate-then-fix feedback loops, capping it at 2.

2 / 3

Progressive Disclosure

The SKILL.md is a concise overview with a single clearly-signaled one-level-deep reference ('Load references/request-normalization-smuggling.md'), and that file exists and holds the detailed checklist, matching the well-signaled one-level reference anchor.

3 / 3

Total

10

/

12

Passed

Description

100%Weight 40%Scale 1-3

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A specific, well-triggered, and clearly scoped description that answers what and when while constraining activation to its parent orchestrator. It uses correct third-person voice and avoids vague fluff.

DimensionReasoningScore

Specificity

Lists multiple concrete capability domains—'parser differentials, HTTP normalization gaps, ambiguous headers, path decoding drift, transfer-framing mismatches, and request smuggling routes'—matching the anchor for several specific concrete actions.

3 / 3

Completeness

Clearly answers both what (the normalization/smuggling workflow scope) and when via an explicit 'Use when...' clause plus a gating 'Use only after...' condition, satisfying the top anchor.

3 / 3

Trigger Term Quality

Includes natural user-facing phrasing such as 'trace proxy and backend parse differences', 'CL/TE issues', and 'routing outcomes that differ across hops', giving good coverage of terms a CTF user would actually say.

3 / 3

Distinctiveness Conflict Risk

The niche is sharply bounded by routing through '$ctf-sandbox-orchestrator' and a unique smuggling-specific trigger set, making conflict with unrelated skills unlikely.

3 / 3

Total

12

/

12

Passed

Validation

100%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation16 / 16 Passed

Validation for skill structure

No warnings or errors.

Repository
zhaoxuya520/reverse-skill
Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.