write-poc

What problem does it solve?

Security researchers and auditors often struggle to produce clear, reproducible proof-of-concept code that demonstrably proves a vulnerability while remaining safe and easy for maintainers to run and triage. This skill enforces a structured approach so PoCs are minimal, parameterized, and accompanied by clear explanations and success indicators.

Core Features & Use Cases

• Structured five-phase workflow: gather details, design exploit flow, choose approach, implement via a delegated gnome, and independently review via a familiar.
• Safety-first conventions: benign payloads, parameterized targets (localhost/$TARGET), clear header metadata, and a validation script that warns about dangerous patterns.
• Smart contract and web support: guidance for unit tests, fork tests, Foundry conventions, and integration with forge-poc-templates when appropriate.
• Practical outputs: generates test-case PoCs, single-file scripts, and reproduction steps that maintainers can run locally for triage and remediation.

Quick Start

Ask the write-poc skill to create a minimal, benign PoC that demonstrates a reflected XSS in /search using alert(1) and targets localhost as a parameterized target.