behaviours/loop-control-and-pivots/SKILL.md
Retry discipline for stuck work. Use when an approach fails repeatedly, when grinding a side problem (env setup, missing tool, credentials, file transfer) instead of the goal, or when a debug/exploit/build attempt is not converging. Enforces evidence-first pivots, a 3-strikes rule, and honest BLOCKED reporting over thrash - while resisting premature give-up: pivot the dead path, but hold the objective while budget and untried approaches remain.
npx skillsauth add aeondave/malskill loop-control-and-pivotsInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
Repeating a failing approach burns budget and hides progress. Fail fast, pivot on evidence, and stay on the goal.
failed path → quote the exact failure → next shortest path. Each retry
must change a variable, not just re-run hope.[BLOCKED: need X] and pivot to productive work rather than sinking the
run into it.Fail-fast applies to a path, never to the objective. A dead path means pivot; it does not license abandoning the goal. The dominant failure mode on capable models against hard targets is premature surrender — bailing with "stuck" / "need a tool" / BLOCKED while budget and untried attack-classes remain.
hypothesis-driven → "'Impossible' is a hypothesis".)Set caps before starting. Trip a cap → stop, quote it, pivot or report.
[BLOCKED: need X].| Smell | Instead |
|---|---|
| Re-running the same command hoping it works | change an input/assumption, or pivot |
| Two hours on env/tooling for a 10-minute task | bounded attempt → [BLOCKED: need X] → pivot |
| "Almost there" for the 5th identical attempt | quote the failure, mark the path dead, pivot |
| Silent give-up | report the blocker + partial results + next smallest step |
[BLOCKED: need X] — what you were trying, the exact failure (verbatim), what you derived, and the
one capability/decision that would unblock it. Pair with evidence-before-claims so the blocker is
as auditable as a success would be.
development
Auth/lab ref: Unicorn Engine CPU-only emulation for shellcode, decryptors, custom VM handlers, instruction tracing, memory hooks, and register-level experiments.
development
Auth/lab ref: Renode board and SoC simulation for MCU/RTOS firmware, UART/GPIO/peripheral modeling, GDB remote debugging, REPL platforms, and RESC scripts.
development
Auth/lab ref: Qiling OS-layer binary emulation for PE/ELF/Mach-O/UEFI/shellcode with rootfs, syscall/API hooks, filesystem mapping, and runtime patching.
databases
Auth/lab ref: QEMU user-mode and full-system emulation for cross-arch binaries, firmware, kernels, disks, serial consoles, networking, and GDB stubs.